Roles and Permissions allow you to manage user access on a very granular level. By default you there is an admin role and a user role. Users can do everything except create or edit Roles or Users.