Create a new role with custom permissions
Define the role name and scope
Only users of this type can be assigned this role
Select what users with this role can do