Roles
The Roles page (/admin/roles) lists the built in roles and the permissions they grant. It needs users:read.
It is read only: roles are bound to users in Users or through the group mappings of
Authentication.
The table of roles and permissions is in the console guide.