A role is an identity that distinguishes a user's rights from others' and determines different job functions a user has in the TWCloud system. A role gives a set of permissions to a user to perform one or more operations within the TWCloud system. New permissions can be added as new resources or tasks are created. You assign a role to a user when you want that user to accomplish tasks or work on a resource. Not every user has a role. You may create a user without giving the user any role. You may, also, create a new role first and assign it to a user later. TWAdmin displays all roles on the Roles Management page, see Types of roles. You can also see these roles when you are creating a new user on the Create a new user account page (you can see these roles on the User Details page).

An authorized user like a User Manager (role) can create a new user account in TWAdmin. When you create a new user, you can also assign him or her a role to access and work on a particular resource. A user can have more than one role and handle more than one resource. Creating a new user and assigning a role with a resource to the user can be done at the same time. In TWAdmin, you can assign a role to more than one user at the same time. Users can be reassigned from one role to another. Users who have the same role assume the same tasks within that role.