These are the Roles which are part of the Core functionality. They are set up and maintained by the Ocean system itself. You will be creating additional Roles as part of your system development cycle.
The Core Roles are collections of Rights. Roles are assigned to Groups. A Role can also be assigned directly to an ApiUser, but we strongly recommend that you instead create a new Group and assign the ApiUser to it, especially for end users. Your system structure will become much more manageable.