Custom roles explained
Custom workspace roles: named permission sets you build in Role Management and assign on invites and memberships.
A custom role is a named set of workspace permissions. Org owners create and edit roles in Role Management; members receive exactly one role per workspace membership.

What you can put on a custom role
Workspace-assignable groups only: projects, keywords, tracking, alerts, analysis, reporting, tools jobs, GSC, invites, and similar day-to-day keys.
Excluded from the role builder (account scope): organization admin controls delivery/template admin, billing access, package view access. Those stay with org owners.
Role packs
Starter packs ship named roles you can copy. Prefer recipes such as Client Viewer, SEO Executive, and Agency Manager over granting every key.