You should limit the system roles assigned to users to only those that grant access to tasks and areas of the application each user needs to successfully complete their specific job responsibilities. When you assign the system roles to a user based on their job and responsibilities, the user sees only the tasks and features granted by the roles.
As a user’s job responsibilities change, you will need to adjust the system roles they are assigned to. In some cases you will need to assign a user to new roles and remove them from other roles.
Note: The tasks assigned to each standard system roles are preconfigured and cannot be changed. If a user needs additional privileges that a single system role alone will not provide, you can assign the user to multiple roles.