Hi @Itai Zur , I think most of your question can be found in the AD App Roles documentation. The link there shows how you can view and select roles. This document shows how you can create new roles. Please let me know if this answers your questions. If not I can help you further!
If this answer helped you please mark it as "Verified" so other users may reference it.
Thank you,
James