What are the possible user permissions and policies and how can I manage them?

Based on the predefined role or custom role configuration, you can decide if a user has access to organization-level settings such as Billing, User Management, Domain Groups Management, Audit Logs or just to a Domain Groups that contains selected domains and product features.

You can also decide if a user should be able to edit certain settings or just view them (for example as a Guest).