Following are the tasks a system administrator can perform in the Access settings module.
Manage roles
Add a role for user access
Edit a role
Copy a role
Manage users
Edit user access
Reset user passwords