Capabilities have roles with defined permissions.

Owner.

Admin.

Writer.

Follower.

Member.

Roles are not hierarchical. A user can have multiple roles. Roles might overlap in permissions.

Permissions:

Comment.

View.

Edit.

Delete others content.

Grant capabilities.

View emails.