A role is a set of permissions that you can assign to a user. For example, if you'd like to have a user only be able to manage campaigns, you'd want to create a new role called "Campaign Manager," with Create, Read, Update, and Delete permissions on the Campaign.