Roles bundle many rights and can be assigned to user groups. To manage roles it is necessary to have a technical understanding of the system, which is the reason why they must be handled in the System module.
A role is available in every client and not client specific.
A user which is assigned to a user group automatically gets all the rights that belong to the roles of the user group. User groups are client specific.
A role consists of:
A name and a description of the role
a list of rights (mainly the right "EXECUTE")
functions or function groups to which the right applies
setting if the role is enabled and if it allows or not allows the rights.
Role section have no functional impact but help to organize the roles when they are shown in a list