Select Users & Access -> Roles from the left sidebar
Click the Add new role button
Give the role a name, i.e. system administrator, or finance team member, etc.
Select any of the appropriate permissions for this role, i.e. a finance team member should only really see billing related screens within the Katapult console.