During the add person process define a generic role from the User permissions slider. Access levels are from no access to full control as a system owner.
A person can be designated as a team manager from the ‘Teams’ section. Team managers can fully control their own teams (and manage timesheets for their teammates with a Premium and Enterprise plan) and change job profiles as well.
With a Premium or Enterprise plan, a person can be designated as a project manager using Edit projects > Select project managers. Project managers can review project budgets and performance.