Term. A set of users designated for e-doc routing who share a common functional business responsibility. E-docs may be routed at any point in their approval to individuals or roles. Role approvals may require approval of all role members or any one member. KFS also uses roles to control authorization, restricting certain functions to the members of a given group. Roles aggregate Permissions. When Roles are given to Entities (via their relationship with Principals) or Groups, an authorization for all associated Permissions is granted.