3. Built-in Role System

Role	Display Name	Scope	Primary Use
super_admin	Super Administrator	System-wide	Initial setup / emergency use
general_manager	General Manager	System-wide	Day-to-day admin (VG creation, users, policies, etc.)
identity_manager	Identity Manager	System-wide	Manage users, groups, and access policies
volumegroup_manager	VolumeGroup Manager	VolumeGroup-scoped	Manage volumes & VolumeGroups + set Access Policies
usergroup_manager	User Group Manager	UserGroup-scoped	Manage group membership (no direct data access)
member	Member	VolumeGroup-scoped	Default role for regular users
viewer	Viewer	System-wide	Read-only monitoring

Multiple roles

A single user can hold multiple roles simultaneously.

Example: volumegroup_manager + usergroup_manager assigned at the same time.

Custom roles

Create organization-specific roles via Access Rules → Roles → ADD ROLE.