User roles and permissions allow system administrators to control which users are able to access which parts of the system. This is done by assigning specific roles to users and then granting the appropriate permissions to those roles. For example, a system administrator might create a role called "editor" and then grant the "edit articles" permission to that role.