What is the relationship between Roles and Permissions in DocuSign CLM?

• A. Roles group a set of Permissions; assigning a Role grants the associated permissions to a user.
• B. Permissions determine the roles; roles have no effect on permissions.
• C. Roles and Permissions are unrelated; users have all permissions by default.
• D. A Role is just a UI label; permissions are assigned separately.

Answer: (A)

In DocuSign CLM, roles are bundles of permissions. A role groups together a set of allowed actions, and when you assign that role to a user (or a group), the user automatically gains all the permissions included in that role. This makes access control efficient: you manage what people can do by defining roles, then assign the appropriate role to each user rather than toggling individual permissions one by one. For example, a role might grant the ability to view, edit, and approve documents within a workflow, while another role might be limited to viewing only. The idea is that permissions are the actual capabilities, and roles are convenient containers that grant those capabilities when assigned. The other options don’t fit because permissions don’t determine roles in reverse, roles have a real effect on what a user can do, and users don’t have all permissions by default without being assigned a role.