WSO2 IoTS is shipped with a set of default roles. However, if required, tenant administrators will be able to create new customized roles. Tenant administrators can use roles to manage the users and their devices. While, end-users allocated with device operation permissions can manage their own devices via the WSO2 IoTS Console. Administrators can create roles, assign them to a user or a group of users, and edit or delete existing roles.