Roles are containers used to group administrators and clients. There are 3 types of roles. See Delegated administration roles.

Administrators are individuals or groups given responsibility for configuring Web Security manager settings, managing policies for clients, running Internet activity reports, or auditing the system. An administrator's set of responsibilities is determined by the role and permissions that the administrator is assigned. See Delegated administrators.

Permissions determine what responsibilities (like creating policies or running reports) an administrator has within a role. The available permissions change based on which type of role an administrator is assigned to. See Delegated administration and reporting permissions.