In a Tivoli environment, an authorization role that provides access to specific resources in the local Tivoli region and any connected Tivoli region (for example, policy regions or the Administrator collection).