Company roles at Settings → RBAC → Roles.
Settings → RBAC → Roles (/settings/rbac/roles) lists company roles. Heading: Company Roles.
Who can open it: users granted Roles.
Enter name, slug, and data scope (All records or Own records). Scope is not edited on the permissions page.
Then open Permissions and tick pages + View / Create / Edit / Delete for this role.
Employees pick this role. System roles cannot be edited here.
Deleted roles can be restored. People still showing a deleted role keep the old label until you assign a live one.