Hi michal, the almighty role is the administrator. This role can do anything, ignoring all permission limitations.
Then, there are user roles for which you can configure available permissions, simply go to Maintenance -> Settings -> Role permissions and do the configuration (under the administrator account).
