An authorized user can access the New Role command in the Administration tab of the HQ user interface. You can also create HQ roles using the HQApi role command.