You can use the Roles tool in the

Security Access Manager

workbench to assign roles to users and user groups. The roles assigned to a user or user group determine the resource privileges of a user or user group. You cannot assign privileges to users directly.

The

Security Access Manager

enforces resource authorization for requests from external application users. Administrators and data stewards who use the

Hub Console

to access

MDM Hub

resources are not affected by resource privileges to the same extent.