To add a new user role:
On the home page of the console, click Access Control.
In the navigation pane, click User Roles.
In the details pane, click Create. A Create User Role page with General, Included Members, and Excluded Members setting is displayed.
General: Specify the name and description of the user role. Click Next.
Included Members: Click Add to select users from the dropdown list which should be included in the user role. The drop down list consists of Local Users, LDAP Users and Groups, Database Users, and Agent Users.
Browse to users or groups and select a source.
Click Next.
Excluded Members: This field is only applicable for LDAP Users and groups. An LDAP user or group can be excluded, if that user or group is part of the LDAP groups selected Included Members in the previous section
Click Create.