Assign roles to user and group accounts to grant them permissions (access rights and privileges). For more information, see topic System roles.

The ROLE_ENVIRONMENT_MANAGER system role grants permissions to create, update, delete, and read product editions and pipelines; create and delete tenant tasks; and read and update storage template.