Enterprise Vault's pre-defined RBA roles are associated with operations and tasks that assigned administrators are allowed to perform. You can create custom RBA roles, or change the low-level operations that particular roles are allowed to perform, if you have a detailed knowledge of the XML schema of the Microsoft authorization store. For more information on this schema, see the following Microsoft article:
https://msdn.microsoft.com/en-us/library/bb897401.aspx
To create custom RBA roles or change the low-level operations that particular roles are allowed to perform:
- Download the RBA store as an XML file from the Enterprise Vault Directory.
- Edit the file to customize the RBA store to suit the requirements of your environment.
- Upload the file back to the Enterprise Vault Directory.
For information on how to use the Enterprise Vault PowerShell cmdlets to download and upload the RBA store, see the Enterprise Vault Administrator’s Guide.
You can also use Windows Authorization Manager to customize the RBA store but note that Windows Authorization Manager is deprecated from Windows Server 2012.