1. Head over to the Supabase website and log in to your account.
2. Click on the New Project button to get started with a fresh project.
3. Fill in the details like Project Name, Database Password, and Region.
4. Hang tight for a few minutes while your project gets set up.

1. Once your project is ready, click on it to open the dashboard.
2. On the side menu, find and click the Database tab.
3. Open up the SQL Editor to start creating tables and roles.

1. In the SQL Editor, create different roles using the CREATE ROLE statement.
   ```sql
   CREATE ROLE admin;
   CREATE ROLE editor;
   CREATE ROLE viewer;
   ```
2. Hit the Run button to execute the SQL script.

1. Define what each role can do using the GRANT statement.
   ```sql
   GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO admin;
   GRANT SELECT, INSERT, UPDATE ON ALL TABLES IN SCHEMA public TO editor;
   GRANT SELECT ON ALL TABLES IN SCHEMA public TO viewer;
   ```
2. Click the Run button to execute these statements.

1. Assign roles to users with the GRANT statement.
   ```sql
   GRANT admin TO user_admin;
   GRANT editor TO user_editor;
   GRANT viewer TO user_viewer;
   ```
2. Make sure these users exist in your Supabase authentication system or PostgreSQL users.

1. In your app code, use JWT tokens to authenticate users.

2. Decode the JWT token to get the user's role.

3. Implement role-based logic in your app to control access:
   ```javascript
   const userRole = decodedToken.role;

   if (userRole === 'admin') {
   // Allow all actions
   } else if (userRole === 'editor') {
   // Allow only select, insert, update actions
   } else if (userRole === 'viewer') {
   // Allow only select actions
   } else {
   // Deny access
   }
   ```

1. Log in with different user roles to check their permissions.
2. Test each role to make sure they can only do what they're supposed to (admin, editor, viewer).

1. Regularly review and update roles and permissions as needed.
2. Use Supabase's logging and monitoring features to keep an eye on any anomalies or unauthorized access attempts.

This step-by-step guide helps you manage user roles and permissions in Supabase, ensuring that access to resources is tightly controlled based on the user's role.