Roles grant functional capabilities to a user, and must be managed by the user administrator.
The permissions granted to a user are the sum of all assigned roles. The authenticated user role is automatic for anyone with a user account and logged in. The anonymous user role is automatic for any visitor without an account or not logged in.

**Current List of Roles:**

anonymous user:

- Create weblinks (for the MIC)

authenticated user:

- Create cases to projects they have access to
- Create weblinks (for the MIC)
- Use Advanced Search
- Edit nodes owned or created by self
- Add comments to nodes where permitted

content creator:

- Create bibliography entries (publications)
- Create new pages in books
- Edit book pages
- Create blog entries
- Create user profile page

content editor:

- Create and edit most types of extended/special content nodes
- Create new books

content administrator:

- Create anything
- Edit anything
- Administer taxonomy terms / structure

event administrator:

- Create and edit events and stories that appear on the front page.

facilities user:

- Create reservations

group administrator:

- Assign people to groups for which they are appointed

user administrator:

- Administer users

resource administrator:

- Create and edit resources / inventory items

administrator:

- Do anything and everything