As explained in the section Roles and permissions, the scopes of pre-existing (i.e., pre-defined) roles in the Teamwork Cloud (TWCloud) system fall under two categories: Global and Resource-specific.
A role with a global scope allows a user to work on any protected objects in TWCloud; the permissions coverage is comprehensive and not limited to a specific resource. Users whose role scope is global are authorized to carry out their tasks (aligned with the permissions) anywhere within TWCloud. For example, a User Manager maintains and manages all user accounts on the TWCloud system. There is no need to assign resources for this role.
A role with a resource-specific scope allows a user to work on a local project. The permissions of this role are graded on a resource basis. A user who reviews a project or document has a resource-specific role. A user can have more than one resource-specific role (for example, user A can be both the Resource Contributor of Project A and the Resource Manager of Project B). This supports the working concept of different roles in each project of an organization.