Creating permissions can be done from "admin > permissions > create" page

There are some unchangeable permissions which you must not change them, they are shown disabled on the permissions page

If you're a developer and you want to create a new permission, you'll need to give it a name, enter the controller name with its namespace "App\Http\Controllers\...", enter the action name (the controller class method) and the HTTP method (GET, POST, ANY, HEAD ....)

Open "admin > roles > create" page

Enter a name for the role (administrator, moderator, ...)

Select the appropriate permissions for this role (Access the dashboard, approve items, ...)

Save the changes