What is the 'Administrator' ability in roles, and what can administrators do?