What are the preconfigured roles?

There are four preconfigured roles in Enterprise Console:
Role Description
System Administrator A preconfigured role that has full rights to manage Sophos security software on the network and roles in Enterprise Console. The System Administrator role cannot be edited or deleted.
Administrator A preconfigured role that has rights to manage Sophos security software on the network, but cannot manage roles in Enterprise Console. The Administrator role can be renamed, edited, or deleted.
Helpdesk A preconfigured role that has remediation rights only, for example, to clean up or update computers. The Helpdesk role can be renamed, edited, or deleted.
Guest A preconfigured role that has read-only access to Enterprise Console. The Guest role can be renamed, edited, or deleted.

You can edit the Administrator, Helpdesk and Guest roles, or create your own roles as described in Create a role.