As the Org Admin, you can make changes to user roles for your organization. You can also choose which user role is automatically assigned to any new user in your organization.
Users can be assigned to more than one role.
Which user roles are assigned by default? See User role secured asset definitions
After you've changed a user's permissions, they may need to log out and log back in for the change to take effect.