Creating, Modifying and Copying Roles 
Creating a New Role
To create a new role proceed as follows:
Your role is created and is displayed in the edit area. At the right you see the properties of the role (such as title and original language).

Read also
What should you look out for during role maintenance? and Adding Content Objects to Roles.You now see the new role object in the window of the view area.

The role does not appear in the view area until it has been saved.
If you created a role and do not want any one else to use or change it, you can define a warning for this role. In this case select Role is generated in the role properties. If you set this flag and another Role Editor user tries to change your role, a warning is displayed when the role is loaded into the edit area.
The roles and worksets delivered by SAP Portals also contain this warning to prevent them from being overwritten.
Modifying an Existing Role Centrally
You can also move an existing role to the edit area for modification.

Do not carry out this procedure for roles that belong to the SAP Portals' namespace.
To change roles centrally, proceed as follows:
Note that you only see the changes to the edited object in the view area when the role has been saved.

If a warning is displayed when you move a role to the edit area for modification, the person who created this role has protected it against changes. In this case you should not edit the role.
Modifying Roles Delivered by SAP Portals
As the above section explains, you should never modify roles delivered by SAP Portals (for example, Portal administrator/Knowledge Management administrator roles).
If you make a central modification to these roles and then update the roles in the Portal, all the changes you have made are lost.
Instead, proceed as follows:
If you make changes in this way (that is, changing roles in the SAP Portals' namespace only within your own roles), this does not cause any modification to the com.sapportals.km.km_admin role originally delivered by SAP Portals. You are simply making a local change that only has an effect within your own role. The com.sapportals.km.km_admin role is not affected.
When SAP Portals delivers an update of the com.sapportals.km.km_admin role and you implement the update in the Portal, the following things happen:
Copying a Role
You can copy an existing role and then edit the copied version. Proceed as follows:
You now see the copied role with the suffix "CP" after the name in the role catalog below the original role.