---
title: "Implementation"
url: https://docs.catalyst.zoho.com/en/cloud-scale/help/authentication/user-management/roles/implementation/
description: "User Management allows you to directly add end-users to your application and assign them custom roles"
last_updated: 2026-08-28T06:26:16Z
service: Cloud Scale
type: general
---

# Implementation

### Create a New User Role 

When you create a new custom role in Catalyst, you must clone an existing role. This action will clone the set of permissions from the parent role to the new role. You can change the scopes and permissions of your custom role in the [Permissions](https://docs.catalyst.zoho.com/en/getting-started/set-up-a-catalyst-project/profiles-and-permissions/) section of [Data Store](https://docs.catalyst.zoho.com/en/cloud-scale/help/data-store/introduction/).

> **Note:** You will not be able to delete roles from Catalyst currently. The provision to delete roles will be rolled out soon.

To create a new user role for your Catalyst application:

1. Click the **Roles** tab of the *User Management* section of *Authentication*. Click the **Add Roles** button.
![cloud_scale_authentication_user_management_roles_add_roles_highlit](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_add_roles_highlit.webp)

2. Enter the name and description for the *Role*.
![cloud_scale_authentication_user_management_roles_name_desc](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_name_desc.webp)

3. Choose an existing role to clone the scopes and permissions for your custom role from the drop-down selection of **Clone Role**.
![cloud_scale_authentication_user_management_roles_clone_role](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_clone_role.webp)

4. You can enable the **Make as Default** toggle option if you want to ensure that when an end-user is added to your application, they will be automatically added to this role by default. Catalyst will automatically apply the permissions defined for this role to the new user.
![cloud_scale_authentication_user_management_roles_makedefault](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_makedefault.webp)

5. Click **Add**.
![cloud_scale_authentication_user_management_roles_role_added](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_role_added.webp)

The role will now be displayed in the *Roles* section along with the unique *Role ID* generated by Catalyst, the description of the role, the details of the collaborator that created the role and the date and time the role was created on.

### Edit a Role

You can edit the name, description, and choose if you wish to make the role a default role or not using the **Make as Default** toggle.

To edit a role:

1. Click the **ellipsis icon** present at the corner of the role you wish to edit and select **Edit**.
![cloud_scale_authentication_user_management_roles_role_edit_option](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_role_edit_option.webp)

2. Make the required changes and click **Update**.
![cloud_scale_authentication_user_management_roles_role_update](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_role_update.webp)

### Delete a Role

The following points need to be taken note of before you opt to delete a role:

* While you can edit a system defined role—`App Administrator` and `App User`, you cannot delete them.

* You cannot delete a `Default` role. To delete a role that is marked as `Default`, you need to make another role as `Default` before attempting to delete the intended role.

* Before deleting a role you need to transfer its users to a new or a different existing role. 

To delete a role: 

1. Click the **ellipsis icon** present at the corner of the role you wish to delete and select **Delete**.
![cloud_scale_authentication_user_management_roles_role_delete_sel](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_role_delete_sel.webp)

2. Transfer the users of the role that you are going to delete to a different role. You can do so by choosing the role from the drop-down.
![cloud_scale_authentication_user_management_roles_role_delete_transfer_role](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_role_delete_transfer_role.webp)

> **Info:** If there are more roles in the [development environment](https://docs.catalyst.zoho.com/en/deployment-and-billing/environments/development-environment/) than in the [production environment](https://docs.catalyst.zoho.com/en/deployment-and-billing/environments/production-environment/), and if you choose to migrate your project back to development from production, then:

* The additional roles present in the development environment will be automatically deleted.

* The users mapped to these roles will be mapped to the `Default` role as listed in the production environment.

3. Click **Yes, Delete** to delete the role.
![cloud_scale_authentication_user_management_roles_role_delete_confirm](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_role_delete_confirm.webp)

You will get a console notification notifying you that the required role has been deleted and its users have been successfully transferred to the Transfer Role you selected.
![cloud_scale_authentication_user_management_roles_role_del_console_notif](https://catalyst-docs-development.zohostratus.in/images/help/authentication/cloud_scale_authentication_user_management_roles_role_del_console_notif.webp)