Roles are hosted in external authentication systems and cannot be edited from within SAP CPS.

Users can grant roles privileges they have with an '"Admin'' rank to custom roles. Custom roles are roles that did not ship with SAP CPS.