SAP ships foundation role templates for users and administrators of the SAP Fiori launchpad (FLP).
Watch the video to understand predefined roles.
Additional Role Templates

Being authorized to use the FLP does not mean that any app can be started or data can be searched. To do that, additional roles and authorizations are in place. The topic authorizations must be taken seriously. SAP recommends to approach authorization specialists or to educate oneself specifically in the SAP S/4HANA authorization concept.
Note
More information about this topic can be found in ADM945 (Authorization Concept for SAP Fiori on SAP S/4HANA):