| Can assign roles specific to an app, make
other users app or instance administrators, and assign other users
any predefined or custom roles. App administrators cannot
be assigned predefined or custom roles to specific instances of
the app because they already have full role access to all app instances. |