AWS IAM roles primarily allow you to assign granular permissions to AWS services, applications, and resources without using individual user credentials, enhancing security and manageability.