A role groups individual rights together. You can define the rights for “see”, “create”, “update” and “delete” for the different areas of the administration. Assign a role to a group and the individual rights of this role will apply to each user in the group.
The rights policy in oneclick™ works with the addition method. Initially, a user has no rights. So rights can only be added.