Roles are created and managed in Configuration \> Security \> User Roles.
Creating a Role
Open the Configuration application.
Navigate to Security \> Roles.
In the Roles section, select New.
If creating a single role, move on to step 5.<br>To create multiple roles, type the number of additional roles you wish to create and select Add (For example, to create 4 roles, type 3 and select Add)
Enter a descriptive name for each role.
Enter an audit comment explaining why the role was created.
Save the changes.
Use role names that clearly reflect the type of user the role represents. A role represents a type of user, not an individual — multiple users can be assigned to the same role.
Configuring Module Permissions
Module permissions define which modules users assigned to a role can access. A module that is not included in a role's permissions will not appear in the side menu for users of that role.
Open Security \> Roles.
Select the role to configure.
In the Module Permissions section, select Edit.
Enter the number of module permissions to create and select Add.
Select the module to grant access to.
Repeat for each module the role should be able to access.
Enter an audit comment.
Save the changes.
Application access is derived automatically from module permissions — there is no separate step to configure application-level access.
Assigning Users to a Role
Open Security \> Roles.
In the Roles section, select Edit.
Enter the number of user-role records to create and select Add.
Enter the user's email address.
Select the role name to assign.
Enter an audit comment.
Save the changes.
A user can be assigned to more than one role. Their effective permissions are the union of all roles they belong to.