You can use the User Roles screen to create custom user roles.
The User Roles screen appears.
The Add Role screen appears.
The description appears in the User Roles list. Providing a meaningful description can help administrators quickly identify a user role if the user role name cannot fully convey the use for the user role.
Full control, except: Select to allow users to perform all actions available on the accessible menu items
Create, copy and import policies: Select to prevent users from creating, copying, or importing policies on the Policy Management screen
For more information, see Policy Management.
Monitor, review, and investigate DLP incidents triggered by all users: Select to prevent users from investigating DLP incidents triggered by all Active Directory users
Read only: Select to only allow users to view information on menu items selected in the Menu Access Control section
The new user role appears on the User Roles screen.