Which user you act as drives permissions across the app. Use this while the product runs on demo accounts; it is replaced by real authentication in production. Choose the seeded superuser@arscmp.com account for full access (all modules, no portal restrictions).
Roles drive permissions. You can also use real sign-in at /login.