When a database is created, the Heroku Postgres add-on grants all non-superuser permissions in your database; you can use SELECT, INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES, TRIGGER, CREATE, CONNECT, TEMPORARY, EXECUTE, and USAGE.

You cannot create or modify database roles, because you don't have superuser permissions.