An account role is created in the installation process with the following permissions:
- read_course_content
- read_course_list
- read_roster
- read_sis
- read_reports
- manage_students
- view_user_logins
- lti_add_edit
- read_email_addresses
- read_forum
- change_course_state