From Privileged Access Manager 4.0, "roles" and the associated access to modules have been described to improve the new user interface's readability. These "roles" refer to the administrative permissions used while deploying Privileged Access Manager.
NOTE:Every time a new permission is added the user has to log out and log in for the new permission to take effect.
When you create a user group, you must assign at least one permission to the group.
To allow access, you can define one or more permissions according to the tables below: