Admins can now create custom roles at the organization and directory level. Instead of giving users full org admin access, admins can grant exact permissions for specific administrative tasks, such as managing users or setting up devices. This ensures that employees have the access they need to do their jobs without granting unnecessary permissions.