Realms

This functionality allows you to create security domains for your applications and use these domains from your applications through authentication and authorization of the Identity Manager.

In a domain you can create your own roles and assign platform users to them.