Manage roles and permissions
By default, all users will have subscriber access to all sites on your network. You can add new users and also assign different roles for each site in the WordPress Multisite dashboard. If you use the “Multisite User Management” plugin, you can set the default role for each site and this plugin applies it.
Administrators cannot install new themes or plugins in their assigned blogs. Only the “Network Admin” role or “Super Admin” role will be able to install and activate them, either per-site or for the entire network.