Are roles able to be set on each site separately?

I'm looking to use this to allow a multisite to have single sign on (obviously).
However, site admins only have that ability on one subsite. If I create a user, am I able to give them separate roles on separate sites?

I wasn't able to determine that from the README or issues.