Roles are a concept where one security rule, with a set of actions permitted on a resource, can be defined as a newly created admin role. This role can then be manually assigned to a user in the user management section of QMC.