GRC AC10 - Portal Roles

HI SAP GRC Gurus,

There are only 2 portal roles related to GRC AC 10.0 - These roles are to be assigned for super users depending on the application(s) in use. My question is, what role will i assign to the end user who is not supposed to do everything in the system.

Thanks

Madhu