Identity & Access group. Create roles and bind permissions used by RBAC; backed by admin/roles and the /admin/roles pages.
admin/roles
/admin/roles