Roles define user permissions, which can be overriden on the user level, on the Permissions tab.