Permissions control what users can do and what data they can see within your app. Permissions are defined by roles. Each role can have one to many capabilities. Capabilities represent the various tasks that a user can perform.