Setting up the roles is carried out in the
Roles > operations
nested tab of the
Security
tab.