✏️ Explanatory Question
You can create or modify them in Visual Studio under the Dynamics 365 > Security node.
However, modifications should typically be performed by a System Administrator or Developer in a development environment.