Via roles the access on certain portals, portal sites and portlets is controlled.
New roles can only be created by administration.
Depending on the
configuration user roles can be created automatically. The user of a
download portal then automatically gets the role <portal name>-user
at the
first log in and after he accepted the license terms.