RBAC roles breakdown.
The RBAC system has two main groups for RBAC roles, Global and Tenant based. The Global and tenant. This essentially revolves around the concepts of System (Global) access and client data and system access (Tenant). While the Global RBAC roles remain the same, unless a custom role has been created, the tenant roles differ slightly. As you can see in the following screenshot the roles are prefixed with the area they apply to e.g. the tenant name or global.

Note that these items are not service specific but rather type of access that needs to be granted. Currently the following four classifications are in place and can be assigned.
Superadmin (Full admin rights and also rights to assign access)
Admin (Full admin rights)
Write (Able to access modules and perform POST/PUT functions)
Read-only (Able to access modules and perform GET functions)
Please refer to Role Based Access Control (RBAC) for further details on this.
🔖 Note: As of publication of this page there is no role that is specific to any application or component of the system. Further review of the RBAC system is continuous and this document/page should be seen as a living document with updates being applied as needed.