Roles And Capabilities

Hej,

I am running a multisite where blog admins should have the following capabilites:
1. Add \ Edit \Delete Posts
2. Approve\Delete comments
3. Privacy settings ( as in multisite privacy)
4. Handle there account ( Pay for pro)

is there a recommended way for doing that?

Thanks,

Koff