Gold Client is delivered with a single authorization object and assigned to it are around 80 authorization activities. As such, the Gold Client security model can be thought of as providing "button level" access meaning that most buttons available within the UI - as well as a few other various parameters and settings - have security assigned to each of them. In this manner, an organization can be very granular with the security that is assigned to their various user groups.
Qlik does not provide default security roles, but we do have best practice recommendations for creating these roles. Please reference the Gold Client Security Guide for further content.