Roles permissions

Can view roles - allows a user to view roles 

Can manage roles - allows a user to create, edit and delete roles, requires Can view roles, in combination allow users to manage roles/permissions