The ability to create roles in CCF 1.5.1 is provided as a safety rather than a security feature. Roles allow you to restrict the connector actions available to a user. For example, an administrator may want a user to be able to work with hospital entries and pause and resume synchronization, but not be able to edit field mappings. CCF1.5.1 allows the administrator to create a role for this group of actions and make it the "active" role.