When we click Administration/Roles menu, we enter the role management page:
Roles are used to group permissions. When a user has a role, then he/she will have all permissions of that role.
One or more roles can be set as default. Default roles are assigned to new added/registered users as default. This is not a development time property and can be set or changed after deployment.
Since roles are used to group permissions, we can set permissions of a role while creating or editing as shown below:
Note that not all permissions shown in the figure above
Every tenant has its own roles and any change in roles for a tenant does not affect other tenants. Also, the Host has its own isolated roles that are not available for Tenants.