If per-project permissions are enabled in your installation, you can view the existing roles, modify them and create new ones in the TeamCity web UI using the Administration | Roles link (in the User Management section of Settings).
Using the Roles page you can:
create new roles
delete existing roles
add/delete permissions from existing roles
include/exclude one role permissions
You can also configure roles and permissions using the
roles-config.xml file stored in <TeamCity Data Directory>/config directory.
Concepts: Role and Permission