One additional role is available to the enterprise.
enterprise_manager - Manages all accounts within the enterprise. Grants user role privileges across all accounts in the enterprise. Controls which child accounts have access to which sharing groups. The master enterprise account must have at least one 'enterprise_manager' user. An 'enterprise_manager' can also grant the same privileges to another user. A person must first accept an invitation to the enterprise before he/she can be granted 'enterprise_manager' role privileges.
WARNING: You must be very careful when granting another person 'enterprise_manager' role privileges because he/she will have the ability to change your permissions, including removing your own 'enterprise_manager' role privileges.