Create custom role

Summary

create role for specific user with specific screens - best practice

Content

hi,

i need to create a custom role which give permissions for the pages below:

1. manage person (view and edit)

2. manage employment (view)

3. manage talent profile (to view only some of the content)

4. manage compensation (to view only few elements)

what is the best practice to do it? what are the mandatory duties/privilegs and how can i know which uties/privilegs should i add? do i need to use data role or job? is it possible to do it only via security console or i need to do some personaliztion?