Custom Roles FAQ

This guide provides answers to frequently asked questions about Custom Roles. See knowledge article EBS: Custom Roles Guide for an overview of Custom Roles.

Can I create a custom role based on an existing custom role?

Yes. Once a custom role is created, it can be used as a base role to create another custom role.

Can I create a custom role from scratch?

No. Creating a role from scratch is not supported. Administrators need to choose one of the base role
templates as a starting point to create the first custom role.

Can I have a full list on what permissions are in scope for custom role?

Download a Permissions Grid from this knowledge article EBS: Custom Roles Permissions Grid.

The Permissions Grid file provides the full list of available permissions for custom role creation with all in-scope permissions highlighted in color. You can also find the default permission configuration for each base role template in the file.

Can users be assigned both legacy roles and custom roles?

Yes. Although the creation workflow of custom role is independent from legacy roles, our role
assignment schema is unified. Once created, custom roles will appear along with other legacy roles in the
list of assignable roles.

How can I migrate my existing legacy roles to custom roles?

With this initial version of GA, customers are suggested to start building custom roles per their
respective use cases to see if they can meet the requirements. We are exploring solutions for migrating
legacy roles to custom roles and will provide them with future iterations.

In the role configuration page, some permissions are self-explanatory, others are not easy to understand. Can you provide permission description tool tip for each permission to help me understand what will happen if I check/uncheck the permission?

That’s something we want to do. These descriptions not only apply to custom role, but also to legacy
roles as they share the same set of permissions. But since there are 200+ permissions and they are not
static, we will see if we can provide some offline documentation for part of the permissions as a first step.

When will the Role APIs support custom roles?

After careful consideration, we have decided to implement a new set of Role APIs for custom role
CRUD. The new API set will adopt a more general and powerful data model to support flexible function
expansion. Target to deliver in 2024.