- In Centrify Access Manager, navigate to Zones > Global > Authorization > RoleDefinitions.
- Right click and select Add Role.
- Enter a name and description for the role. Select the checkbox "Allow local accounts to be assigned to this role" and click Apply.
Refresh the tenant and navigate to Resources > Systems > ZoneRoleWorkflow. Click Add and you see the newly-added role.
Select it and click Add.
Now, the role assignments in the Centrify Access Manager match those in the Centrify portal.