These are the default settings for role permissions; they are all editable in ‘Role Management’
Role Permissions