RBAC role definitions and permission configuration — built-in roles, creating custom roles, selecting permission points, and the default role mechanism.