How do the user rights and roles work?

>