User roles and permissions can be controlled from the user manager 

To create a new user:

1. From the start up menu select security tools and user manager  

3. In the next window fill in the user details ensuring user name, full name, and password fields are all filled in. 

Domain should be set as Sitecore if setting up a new CMS user 

4. To assign roles to the user profile click edit "Edit" and search for the required roles

5. Highlight the required role and select "Add" so that the role appear in the box on the right

6. To remove a role highlight the specific role and click "Remove"

7. Once the required roles have been assigned click ok to save the new user and their roles