Create Custom Roles

Users with the Account Owner role or the Administer users, groups, roles permission can create new custom roles in the Controller UI. A common strategy for designing roles is to create a role with the minimum permissions allowable for all users, such as view permissions. Then you can create roles that use customizations of that minimum permission role to give additional, explicit permissions to a specific feature or business application.
Attention: You can clone predefined roles as a starting point for creating your own customized roles, but you should not assume the cloned roles have all of the permissions of the predefined role. In some cases, there may be hidden permissions, so you should add or remove permissions necessary to ensure you get the RBAC result you need.
  1. While logged in to the Controller UI as an Account Owner, or another role with the Administration permission, go to Settings > Administration.
  2. Click the Roles tab to view the list of predefined roles.From the tab, you can create new roles and modify or delete custom roles.
  3. Click + Create to create a custom role.
  4. Click the Component tabs to configure permissions.