In EmpowerID, Management Roles are collections of operational capabilities packaged as job-based bundles that let you make quick and easy bulk assignments of resources to users that match what they do in your organization. They can be thought of as a powerful form of groups that allow you to grant access across platforms, not being limited to one application or operating system. EmpowerID includes a number of Management Roles that you can assign to people out of the box, and you can create new ones as needed. Each Management Role is a child of a of a Management Role Definition. Management Role Definitions provide a baseline of access that you can use as a starting point for defining the access to resources given to a Management Role. EmpowerID provides a number of Management Role Definitions out of the box, and you can create new ones as needed. EmpowerID Access Levels, also known as Resource Roles, are collections of "operational capabilities" and/or "native system rights" specific to a particular resource type, such as an account, group or mailbox. When you assign an Access Level to a Management Role, you give anyone assigned membership in the Management Role the ability to perform those operations or tasks against a selected resource. This section helps you to understand and use all of this functionality. | 
