You can grant both system and object privileges to a role, as well as grant another role to a role.
GRANT SELECT, INSERT, UPDATE, DELETE ON tableNames TO product_manager; GRANT CREATE USER TO hr_manager; GRANT product_manager, hr_manager TO overall_manager;