Permissions in the system govern which actions and panels a user has access to. Permissions can be very granular eithier giving access to a single piece of content or multiple pieces. This granularity allows administrators to setup additional admin with specific access levels.
Permissions are grouped in the system through roles. A permission cannot given outside of a role.