I think you can find your answer in this documentation topic; How-to: Configure user roles. If you are using the 2.5 beta version of Mendix, you can apply this in the 'Security' settings of your project, go to the tab page 'User roles', and click 'Edit'.