Yes please! I end up giving people way more access than they need just to ensure they will be able to do a simple task. I have no idea what most of the roles even do.

Please include reports on roles as well. We have created numerous custom roles and it would be nice to run a report on role assignments.

Five years later and no movement on this issue. Everything Charlie and Susan talked about I have been dealing with for the past two years as we set up our school in BB. The whole process is very tedious and unintuitive.

I agree wholeheartedly. My problem is that some roles have tasks hard wired in and when you clone them, even if that task is unchecked, it still gives the person access. For example, I just want a role that allows certain faculty like guidance counselors the ability to view any student report card (whether they teach them or not). We cloned the Grading Manager role and only checked generate report cards and transcripts. It also gives them access to record grades for any class. And record grades is unchecked on the cloned role. I would love to see a level between Manager role and Faculty role - something that gives viewing access to grade books, assignments, report cards, etc. but no ability to edit any of it. 

Roles could use a serious revamping.  Probably the single most time consuming task is to figure out how to give some permission to perform a single task.  Documentation of the roles would also be a big help

Tien Bui, I don't know about you, but I expect role cloning to work like templating: you clone a role that is similar to the new one you want, then edit the permissions to reflect what you want. This way you don't have to manually set every single permission, only those that differ from the parent role.

The way it works for me (last time I checked) was that cloning a role did nothing but create a new role with no permissions, which ISN'T cloning. That's just creating a new role. So if I need to create 2 roles that are very similar but differ by 1 permission setting, I end up having to set all the permissions again anyway.

Also, not responding to Tien, but just a general comment: I shouldn't have to give my admissions people 10 different roles to give them the access they need. Part of the problem is that some roles have inherent permissions that you can't or even see. We need clarity on what the roles actually do.

I would also go further and request for an option to combine roles to a newly created custom role.  I agree that "cloning" is not working like how we usually think it should work.  Technically speaking, if the label is "clone" then the newly created role would be exactly the same as the old one, which in my opinion, is quite a useless feature.  

I would opt to remove the phrase "cloning" and simply have "add custom role".  I would imagine there would be a non-page reloading search function to allow us to search through the roles task (w/ description would be a plus).  We can then select those tasks in search and add them to our custom role.