vCloud Director uses roles and rights to determine what actions a user can perform in an organization. vCloud Director includes a number of predefined roles with specific rights.
System administrators and organization administrators must assign each user or group a role. The same user can have a different role in different organizations. System administrators can create roles and modify existing ones for the whole system, while organization administrators can create and modify roles only for the organization that they administer.
The vCloud Director tenant portal allows organization administrators to manage the roles in their organization. If a system administrator publishes one or more predefined tenant roles to your organization, as an organization administrator you can see these roles, but you cannot modify them. You can, however, create custom tenant roles with similar rights and assign them to the users within your organization.
For information about the predefined roles and their rights, see Predefined Roles and Their Rights.