Manage Application Roles
Application roles consist of duty roles for objects security and data roles for data access. You can create, update, and delete application roles and add or remove groups mapped to an application role.
You can map the ready-to use or custom application roles to groups to define the permissions associated with the group. See Create an Application Role.