RBAC permission

I am using Nenad’s yii2 advanced template.

I like to give role member permission to change their password in RBAC system.

But I cant’t find any file where are users and roles permissions.

There is the rbacController in _protected/console/controllers but in that file is no definition for users permission.

Any help?

look at database, tables auth_*


I found rules and permissions there.

They were same as in rbacController.

Where should I update these rules and permissions?

If I change something in rbacController nothing happens.