How do the user rights and roles work

>