Introducing Roles
Roles provide a powerful tool to help you organize and grant complex permissions. Like groups, roles can have various members defined, but each role includes implicit permissions.
You may have already assigned permissions to your console operators, so when you also assign a role to that user you will effectively expand their permissions. When permissions conflict, the highest level will be selected.
To view the available roles, select All Content from the domain panel and select the node labeled Roles. From the list that appears, select the computers, operators, groups and sites that you want to associate with the role.