Certificate-based Authentication and Roles
Clients connecting to the grid with a certificate may include roles when the certificate is created. See Console tool guide. The roles in the certificate are treated as raw roles in the same way as when a session provider is used.