From Settings → People & Access → Roles, Create custom role opens a four-step wizard (apps/web/src/app/(authenticated)/settings/people/roles/custom/new/create-custom-role-page.tsx): Choose Base Role, Name & Description, Customize Permissions, and Review & Confirm. A custom role's permission set is captured in full at creation time from its base role and doesn't stay linked to it afterward; see Invite your team and set roles for the same wizard walked through as part of inviting someone.

TODO(owner, likely product): write the full guide covering PermissionEditor/PermissionCapabilityRail (the permission picker UI in step 3), how Default Sales Types on step 4 affects members assigned the role, and what happens to members already on a custom role when it's edited later.