Roles group permissions together and are assigned to users. System roles are protected and cannot be edited.