In Keystone Client, go to KEMS System Administration Menu -> KEMS Parameters -> KEMS Site Parameters (KE0294) and click "Web Settings":
Select WEBSEC Parameters (KE0626):
Set the default roles that you want assigned to every new employee (either KeyNet KEMS Roles or KeyNet FIN Roles)
Note: you can also get to this screen from KEMS System Administration -> KEMS Parameters -> KEMS KeyNet Parameters (KE0715)
A list of all available KeyNet menu options (a.k.a., roles) this includes a visual representation of the full menu tree and a list of each KeyNet role, categorized by module, can be found on our Client Care portal, under Documents -> User Manuals -> KeyNet. Here is a link to that document.