A role is a set of permissions. The following roles and associated permission sets have already been created for you. You can use these as is, modify them, delete them or create new roles.
A user with Default access can manage and share content, but they can't manage contacts, content sources, or their account. This role is useful for keeping company content from being shared to users outside the company.
A user with full access has access to everything with the exception of administration.
A user with limited access acts like a read-only role: they can view, share, and download content, but cannot manage content, contacts, content sources, or their account.
Creating a New Role:
Creating a New Role
Assigning Permissions To a Role