About roles

OAuth roles represent the "Scope" attribute in the context of OAuth authorization. The term "role" is used because the list on the UI shows Transact roles that are used as "Scope".

When you create a new client, the Roles drop-down list shows all available Transact roles with the additional Admin(SA) role as the first role in the list. Regardless of how many roles are available, the Admin(SA) role always appears on the top. The Admin(SA) role represents a user with the Administrator level privileges. All other roles in the list are taken from the configured system for Roles such as Tomcat, Active Directory, or LDAP.

If a client is assigned to the Admin(SA) role, this client can access all the data in all the APIs without any restrictions.