Avalon has 4 default roles:   

Permissions are also inherited (i.e. an editor can do anything a depositor can do, a manager can do anything editors and depositors can do, an administrator can do anything).

Create administrative units


View all collectionsX

Create collectionsX  
Edit collection informationXX

Set default collection access controlXX

Delete collectionsXX

Manage groupsX

Add/remove managersXX

Add/remove editorsXX

Add/remove depositorsXXX
Add itemsXXXX
Set item access controlXXX
Add metadataXXXX
Publish itemsXXXX
Edit published itemsXX

Delete published itemsXX

Unpublish itemsXX

Edit unpublished itemsXXXX
Delete unpublished itemsXXXX
Move items to other collectionsXX

Batch uploadXXXX
View administrative metadataXXXX