A role is a predefined set of privileges. Application Transformer for VMware Tanzu supports predefined roles such as ROOT, ADMIN, OPERATOR, VIEWER. You can pair these roles with a new user.
Users with the ROOT role can view and perform all actions on the application. The user created during appliance deployment is an admin user with the ROOT role.
Users with the ADMIN role can view and perform all actions on the application, except containerization.
Users with the OPERATOR role can view all flows, but restricted from managing credentials and credential policies, and certain tasks under Administration section.
Users with the VIEWER role can just audit all the information, and not allowed to perform any other actions, except creating support bundles.