A role in IGA is a managed collection of access rights associated with a job function, responsibility or technical purpose. Assigning a role grants its contained entitlements, reducing repeated individual assignments.
Roles need owners, clear membership criteria, understandable contents, lifecycle rules and periodic review. A role is useful only when its access is coherent and its population is governable.