A custom-defined access-permission role, used when the built-in roles aren't sufficient.
An RBAC role defined by specifying actions and scope, used when you need a combination of permissions not covered by the built-in roles.
© 2026 ITBGM