Admins can assign roles from the user management page. Roles control access to quotes, billing, and reporting features.