The default role that is applied for all users. Other roles assigned to a user grant permissions on top of the baseline.

The parameter is available under: Administration > Settings > Access.