Authorizations are organized in roles. Roles can be seen as bundles of permissions to perform actions. Users are assigned a role to a specific object in the ITP/MDK Repository. For example, a user can be granted the role Project manager to a project, another user can be granted the role Text block manager to a Text Block folder.
For more information refer to ITP/MDK RepositoryManual chapter General use, section Roles and authorization.