Operational system roles and custom roles for targeted delegation