Roles are assigned to employees and they define permissions that user is allowed to perform. Each role has a name and list of permissions. By default each tenant has 2 roles: Owner and Affiliate manager, which can't be deleted, but more roles can be added to customize permissions for employees.