...

By placing resources into a role, each assigned Core Identity will be assigned the current resource with the specified access level given that the Core Identity typestype matches. When creating a resource assignment to the role you therefore have to select the appropriate identity type. This identity type will be used to determinate the Core Identity Type.

...

All the Core Identities that are assigned to a role are displayed in the UI. Each such assignment has a reason, a valid from and a valid to. The assignment type further indicates whether this assignment was automatically created based on a rule, was assigned manually by a person or was received in the context of an delegation. You can add and remove those assignments given that you have the appropriate rights.

Approval Groups & Workflows

Approval groups are a quick and easy way to implement an assignment approval process. You can quickly add groups of people and configure whether all or just one person needs to approve an assignment.

Starting from version 9.1, you also can configure your own approval workflows as described here.

Members and Member from

You can nest roles into other roles and therefore create a tree structure of roles. This structure is displayed in the members and members from tabs.

...