built-in roles are not modifiable, but you can define your own ones. some parts of the menu will be hidden depending on permissions (this is currently based on a coarse-grained view, so not everything that the user sees is actually something they can do).