Description of problem: While adding a role to a VM I can add roles such as 'SuperUser', 'StorageAdmin'... It doesn't make sense at all on this object. From docs: "StorageAdmin - Storage Administrator - Can create, delete, configure and manage a specific storage domain." So 'StorageAdmin' is useless here (on VM), it should be filtered not to even try to confuse an administrator in Admin Portal. If the administrator believes he can choose from offered list a meaningful role, he is then confused it is not working as he expected. He can found explaination of such a role in documentation but it would be nice to have one single place where all roles and their relations to objects are documented (not spread around all documentation). Competitors provide easy readable documentation of roles. (Example for ESXI 5.0 - http://goo.gl/GCS8E) Version-Release number of selected component (if applicable): si25.2 How reproducible: 100% Steps to Reproduce: 1. Try to add a role to a VM 2. Do you see 'SuperAdmin', 'StorageAdmin' ? Actual results: Meaningful roles in the role list for an object. Roles explanation spread all over the documentation. Expected results: Filter roles in to those which are logically only related to an object. One single place of documentation of roles and their respective objects relations. Additional info: