Creating roles
It is possible to create
- custom roles in Central Administration on the Roles page (System tab => Security group => Roles page) – option "+ new role":

- or you can create tenant level roles on the Tenants page (System tab => Tenants group => Tenants page) using the Manage tenant roles option, too.
