The Roles Catalog includes tools that let you define the contents of the Roles tab of the User Application. The tools available through the roles catalog include:
Role editor: Defines the set of available roles. Includes information about the role’s trustees, owners, role containment hierarchy, and entitlements.
Separation of Duties editor: Defines the separation of duties constraints and how to handle requests for exceptions to those constraints.
Role Configuration editor: Lets you modify the roles subsystem administrative settings.