Difference between profiles, and roles
Profiles determine what a user can do, Create, Read, Edit, Delete (required) while roles determine what a user can see ( Not Required)
What do profiles control access to
Objects, field-level security ( which fields are visible or editable), page layouts, record types, apps, tabs