One important point is that Orchestrator roles are not normally assigned based directly on job designation such as BA, Developer, Tester, Solution Architect, etc. Roles are permission sets, so they should be assigned based on what that person actually needs to do in Orchestrator.
For example, a Developer may need Automation Developer and possibly Automation Publisher if they need to publish processes. A user who only needs to execute automations can use Automation User. Someone responsible for managing folders can use Folder Administrator, while full tenant administration should be limited to users who actually need Orchestrator Administrator access.
Also keep in mind that tenant roles and folder roles are separate. For example, Automation User is a folder role and UiPath recommends pairing it with Allow to be Automation User at the tenant level.
first thing generally roles are not based on designations
Also if you need granular control on the roles then its better you go with creating custom roles as well as all the default roles might not support the granularity we need