A Role is a collection of permissions that determines what a user is able to do. Permissions are always additive, so users start by being able to do nothing, and then each permissions grants them further ability.
The settings for Roles can be found under Organisations & People as below.
There are a bunch of included system roles, or you can create your own roles and choose which permissions they allow.