Roles function manages the roles in the system. Each role can be assigned to 0 to many functions (permissions).
Each user inherits the functions of role .anno and role .auth.
By default, the system creates those 2 roles without any functions.
Each user has a type and inherits the functions of the role user.type.xxx, where xxx is the type of the user. If user does not have a type, it inherits the function of the role user.type.default.
This makes your user administration much easier. For example, department A has 10 users, they need the same functions. You can create a role called user.type.departA and assign functions to this role. And set the type of all the user in department A is departA. Then all the users in department A will inherit the functions in the role, user.type.departA. No roles to create and to assign to the users are required.
Click the "Roles" in the left navigation menu under List management, a new "Roles" Tab folder will created in the right panel. There are 3 sub-Tab folders, Search Role List, Search result Role List and Create New Role List.

| Role Name | Name of the role. |
| Description | The description. |
| AND and OR | Select AND radio box if you want those criteria add together. Select OR radio box if you want to get the result of either criteria meet |

The top part is the table, shows the list of the sanction list that meet the search criteria. The bottom part is the details, and the Functions of the selected entry.
Each entry can have 0 to many functions. (See Functions(Permissions) for details on Functions.
The .anno and .auth and user.type.xxx are not show in the Roles Tab. All the users will inherit them by default
Double Click the selected record in the table to modify this entry. A new Tab folder "Update/Delete Role list" will be added, as show below:


Grant or revoke the permission (function) to the role by check or uncheck the checkbox besides each function.
Select the "Create New Role List" Tab to create a new entry.

| Field Name | Descriptions. |
|---|---|
| Role Key | Unique record identifier. |
| Role Name | Name of the role, it must be unique with the system. |
| Description | Description of the role. |
| CreatedByDate | Date and Time when the entry is created. It is a read only field. |
| CreatedByUser | User who create this entry. It is a read only field. |
| ModifiedByDate | Last modified date and time; It is a read only field. |
| ModifiedByUser | Last modified user; It is a read only field. |