Managing user accounts
The Drupal Kit does not enforce specific permissions to be associated with specific roles; the design and choice of roles is up to the individual site maintainer. The Kit does provide a way to assign predefined permissions related to content editing and site management to any role in the system. These predefined permissions are considered a sane default for most sites.
Full documentation on this can be found on the Site configuration page.
Helpful Drush commands for manipulating roles and permissions can be found in the Drush 9 role commands documentation.