Who Can Create and Manage Roles?
To create and manage (i.e., view, edit and delete) roles for an organization, you must belong to a role that has the Manage Users permission for the organization. Users in the Organization Administrator role have this permission, although an administrator can assign this permission to other roles.
Note: | Users that belong to a role that includes the Manage Organizations permission have the Manage User permission by implication. Such users can create and mange groups in any organization to which their Manage Organizations permission applies. |
Be aware that you when you define a role, you cannot assign permissions to the role that you do not have yourself. Therefore, if you belong to the Organization Administrator role (and you have no additional role assignments), you cannot create roles that have any additional permissions than the ones provided by the Organization Administrator role. For example, you could not create a role that included system-level permission or permissions for other organizations. A user with the Manage Organizations permission at the system-level (such as someone in the CentraSite Administrator role) would need to do that.
