1. Go to Core > User/Access > Profile > Manage Roles
  2. Click on a role
  3. Click Tasks from the left column
  4. Each task that is checked off controls the access this role has
  5. If a role is unmarked, the role does not have access to that particular task