Master Roles & 2. Derived Roles, where the first one will secure With Transactions, Authorization Objects and with all organizational level management. And the second role is with organizational level management and Transactions and Authorization Object copied from Master Role.