template-backend/config/autoload/authorization.global.php

<?php

return [
    'template-rbac' => [
        'roles' => [
            'admin',
            'user',
        ],
        'permissions' => [
            'user' => [
            ],
            'admin' => [
                'user.create-user',
            ],
        ]
    ]
];