Roles tab
Here you can manage the roles to which the edited user is assigned. Depending on the permissions available for individual roles, the user will be authorized to perform various actions on the website or in the administration interface.
Global administrators have the option of selecting the site for which roles will be managed using the drop‑down list at the top of the page. Only sites to which the given user is assigned on the Sites tab may be chosen. The (global) option can be selected to access roles that are not limited to a single site.
If this tab is viewed in CMS Desk by a site‑specific administrator, only the roles of the current site will be available.
To add a role to the user, simply click the Add roles button and check the boxes next to the appropriate roles in the displayed selection dialog. You can use the Valid to field at the bottom of the dialog to assign the role for a limited time only. The Calendar button can be clicked to easily select the exact date and time when the role should expire. If this field is left empty, the role will be assigned to the user for an unlimited time period. Click OK to apply any changes.
The Change validity action that is available for every listed role may be used to prolong or shorten the time interval for which the role should be assigned to the user. This way you can set an expiration date for unlimited roles or reactivate expired ones.
Roles can be removed from the user at any time using the checkboxes in the list together with the Remove selected button.
Additional information can be found in the Developer's Guide -> Development -> Membership, permissions and security chapter.