Create / edit role
Define a role and explicitly select the permissions it needs.
Role configuration
Avoid granting broad administrative permissions unless required.
Demo only: saved locally in this browser; no production account or permissions are changed.