---
title: Roles
description: Workflows showing how to create PingOne roles and assign them to users.
component: pingone-api
page_id: pingone-api:workflow-library:platform-sso-and-authorization/roles/index
canonical_url: https://developer.pingidentity.com/pingone-api/workflow-library/platform-sso-and-authorization/roles/index.html
llms_txt: https://developer.pingidentity.com/pingone-api/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-08-11
---

# Roles

The Roles workflows provide examples of how you can create and assign roles. You can assign built-in or custom roles to admins, users, and groups in the PingOne environment.

Role management use cases often call the following platform API resources:

| Platform API                                                            | Description                                                                                                                                                                                                                                                |
| ----------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [Roles Management](../../../platform/roles/index.html)                  | The Roles service enables you to create and manage roles that define a set of permissions within the PingOne environment.                                                                                                                                  |
| [Application Management](../../../platform/application-management.html) | The Application Management service enables you to manage applications within the PingOne environment, including creating, updating, and deleting applications, as well as configuring their settings and permissions.                                      |
| [Users](../../../platform/users/index.html)                             | User resources are unique identities within PingOne that interact with the applications and services in the environment to which the user is assigned. The Users service implements directory functions to create, read, update, delete, and assign roles. |
| [Groups](../../../platform/groups/index.html)                           | The Groups service enables you to create collections of users with the same permissions, and the same access to applications.                                                                                                                              |