The Management Portal comes with a number of groups and roles predefined. To give a user administrator privileges over your entire system, for example, it is only necessary to assign them to the Administrators group. The following table shows what groups are supplied with the system, what folders they can access, and what roles they can perform on those folders. The tasks that make up each of the roles are also listed.

http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/cisco_management_portal/cmp7_1/user/guide/mp713ug.pdf