The technical administrator can create custom roles and specify access rights for them (see Roles)