A source of eternal confusion is the difference between roles and permissions in Business Central. In this video, I try to untangle it. Check it out:

https://youtu.be/DeCZCEXW8O0