The Role resource has methods to create and manage CloudGuard roles. Roles are used to manage access permissions for CloudGuard users. Users are assigned a role. This determines the functionality the user can do on CloudGuard.
Creating new roles and assigning permissions to them is a two-step process: first, create the role (POST method), then update the role with permissions (PUT method). This is explained here.