Apple Business — Roles & Permissions checker

Check the organization permissions you need. On the right you'll immediately see which default role(s) qualify.
Source: Apple Business User Guide – Default roles and permissions ("off by default" permissions can be turned on per user by an Organization Administrator or IT Administrator; "always off" can never be enabled).