ASP.NET Core Identity - How to manage roles?

HEY! I'm starting with asp.net and can't figure out a certain thing. I want to implement authentication and authorization (RBAC) to rest api. From what I can see this is what 'Identity' is used for, right? While authentication seems straight forward, I don't completely understand how roles should be managed. Do you create CRUD endpoints yourself to manage them?