You have to create user on the operating system level (the way you can use depends on the OS you are using).
Then use GRANT statement with which you can assign privileges and roles to the users or REVOKE statement for canceling access privileges.
See documentation for details of using grant and revoke statements.