ACE Role question

[taylorml]

Just a clarification about ACE roles. Why does the predefined "Admin" role have any rules beyond:

1. Permit Create all

?

Why are the other 3 rules necessary?

2. Permit Create user access

3. Permit Create system

4. Permit Create changeto

thanks,

marty

[amritpatek]

The ACE provides role-based access control (RBAC), which is a mechanism that determines the commands and resources available to each user. A role defines a set of permissions for accessing the objects and resources in a context and the actions you can perform on them.