You can use System Manager to create and manage roles.
Adding roles
You can use System Manager to add an access-control role and to specify the command or command directory that the users of the role can access. You can also control the level of access the role has to the command or command directory, and you can specify a query that applies to the command or command directory.
Editing roles
You can use System Manager to modify the access of an access-control role to a command or command directory and to restrict a user's access to only a specified set of commands.
Roles window
You can use the Roles window to manage the roles that are associated with user accounts.