Roles define a set of permissions and apps for a group of users. Each user may be assigned multiple roles (in which case, they will receive the permissions/apps given to each role they are assigned to).
For instance, a role can be defined that has “View” but not “Edit” access to the system, or a role can be defined that can publish content but not edit it.
Roles can also be assigned to limit access to specific apps- for instance, a role can be defined that has full access to Digital Signs, but no access to Workstation Screensavers.