Creating and Editing Custom Roles
Designing a role — deciding exactly what permission matrix it carries — is an owner-only action, even if a staff member has Manage Team. Manage Team lets you assign existing roles to people; it doesn't let you redesign what those roles mean.
Creating or editing a role
Go to Team → Roles & Permissions.
Choose Add role, or Edit on an existing custom role.
Set the name, description, and permission matrix (which SEE and DO permissions it carries).
Save.
Gotchas
Only the account owner can create, rename, or delete a role, or change any role's permissions. A staff member with Manage Team who isn't the owner can assign existing roles to people, but can't design or edit the roles themselves.
A role can't have its own permissions edited by someone currently assigned to it — even the owner has to switch off that role first before editing it.
The built-in Administrator role always has full access and can't be edited. Built-in system roles can't be deleted, and a custom role currently assigned to anyone can't be deleted either — reassign everyone off it first.
Any permission change on a role surfaces as an admin notification and an entry in the audit log, so the whole change is traceable after the fact.