Role-based accessOne user identity can hold multiple roles. Administrators inherit operational and approval permissions.