Grant and Revoke Permissions for Application Roles
You can grant individual permissions to a user-defined application role or revoke permissions that are no longer required. For example, you might want to provide an application role that enables users to export their workbooks to a PDF by granting the permission Export workbook to document.