There are some predefined roles, you can just use them, and create new if existing don't server your needs