Only identity domain administrators can create and delete custom roles, and only in the identity domains that they have been assigned to administer.
Custom Enterprise Roles are used to provide object security in OTBI Enterprise.
Duty Roles specified in application deployment descriptors are mapped to the Enterprise Roles created in the identity management system. The mapping is based on matching fully qualified role names.
For a complete list of the Enterprise Roles you need to create to support OTBI Enterprise security, see About Required Enterprise Roles