How does Drupal handle user permissions and access control?

How does Drupal handle user permissions and access control? Can you explain the role of roles and permissions in Drupal’s user management system?