By default, Cloudgenda provides two roles:

Each role is attributed a set of permissions by default, with the Account Owner role being attributed all roles.

The system should allow Account Owners to create other roles. A role can then be assigned to an administrator. Furthermore, an administrator can override some or all of the role's permissions too. This will provide the most flexibility when it comes to assigning role-based permissions to administrators.