Roles define the access control policies for the core resources, by specifying the HTTP operations allowed on a given resource type. Roles are system managed