Design a Set of Roles and their User Group Assignments
A role definition consists of a name, description, and a set of allowed operations on one or more object subtypes. You assign roles to user groups and users to roles within user groups. A single user can have any number of roles, and can have different roles in different user groups.
See Roles for further information.
Parent topic: Design Decision Summary