Roles define the access rights of a user.
See the definitions Category:Sub_Account#Create_a_Sub_Account