How do I create different roles and determine which authorizations they have?