Use or create object security roles

A role consists of a name, description, and a set of operations allowed on object subtypes. Users in a user group that have access to a particular object will be able to perform the operations on the types of objects specified by the role(s) they have in the user group.

• Use predefined object roles
  
• Create object security roles
  
• Assign roles to operations