Roles
A role is a named bundle of permissions, for example "Support" or "Administrator". Instead of giving someone many permissions one by one, you give them a role.
Kinds of role
| Kind | Defined by | Used for |
|---|---|---|
| App role | The application's team | Responsibilities specific to one application. |
| Global role | CM.com | Broad roles not tied to one application, such as Administrator, User and Platform Owner. |
| Custom role | Your organization | Your own mix of permissions. See Custom roles. |
Roles are not the same in every application. An application decides which roles it offers.
How roles are used
A role does nothing until it is given to a principal or a team in a scope. That is a role assignment.