A role is a collection of privileges that you assign to a user or group. Privileges determine the actions that users can perform. You assign a role to users and groups for the domain and for application services in the domain.
The Roles section of the Navigator organizes roles into the following folders:
System-defined Roles. Contains roles that you cannot edit or delete. The Administrator role is a system-defined role.
Custom Roles. Contains roles that you can create, edit, and delete. The Administrator tool includes some custom roles that you can edit and assign to users and groups.
When you select a folder in the Roles section of the Navigator, the contents panel displays all roles belonging to the folder.
When you select a role in the Navigator, the contents panel displays the following tabs:
Overview. Displays general properties of the role and the users and groups that have the role assigned for the domain and application services.
Privileges. Displays the privileges assigned to the role for the domain and application services.
