A role is a mechanism that allows applications to request temporary security credentials on a user or application's behalf.

Note: Eucalyptus roles are managed through the Eucalyptus Euare service, which is compatible with Amazon's Identity and Access Management service. For more information on IAM and roles, see the Amazon IAM User Guide.

The suite of AssumeRoles gives you the ability to delegate users certain access to Eucalyptus cloud resources by allowing them to assume certain roles.