...
The permissions navigator that you use to enable permissions for a role is divided into these two categories (Super Admin permissions and Admin permissions) as shown below. However, note that there may be other categories of permissions enabled for a WSO2 product, depending on the type of features that are installed in the product.
You can access the permissions navigator for a particular role by clicking Permissions as shown below. 
By default, every WSO2 product comes with the following User, Role and Permissions configured:
...
The following table describes the permissions at Super Tenant level. These are also referred to as Super Admin permissions.
Permission Description of UI menus enabled Configuration permissions: 
The Super Admin/Configuration permissions are used to grant permission to the key functions in a product server, which are common to all the tenants. In each WSO2 product, several configuration permissions will be available depending on the type of features that are installed in the product.
- Feature Management permission ensures that a user can control the features installed in the product using the management console. That is, the Features option will be enabled under the Configure menu.
- Logging permission enables the possibility to configure server logging from the management console. That is, the Logging option will be enabled under the Configure menu.Management permissions: 
The Super Admin/Manage permissions are used for adding new tenants and monitoring them.
- Modify/Tenants permission enables the Add New Tenant option in the Configure menu of the management console, which allows users to add new tenants.
- Monitor/Tenants permission enables the View Tenants option in the Configure menu of the management console.Server Admin permissions: 
Selecting the Server Admin permission enables the Shutdown/Restart option in the Main menu of the management console.
...