A role is a set of network access services that can be applied at various points in a policy-enabled network. Roles are usually named for a type of user such as Student, Staff, or Guest. Often, role names will match the naming conventions that already exist in the organization. The role name should match filter ID values set up on the RADIUS servers.
The default non-authenticated (Default Unauth) role will be used while the client is not authenticated but able to access the network. The default authenticated role will be assigned to a client if it completes authentication successfully but the authentication process did not explicitly assign a role to the client.
Note
Default roles are created on the Networks page.A role can have no rules if the default action is sufficient. Rules are used only to provide different treatments for different packet types to which a single role is applied.