In the screen user roles you can combine the required data profile and action profile for each role, and specify when this type of user may log on.
These roles you can then assign to the required user in the screen employees under the tab "User". There you also define the username and password of the user.