Here is the a role that I created related to this. Unfortunately I havent found a way to make the cli display all the permissions actively associated with the role when its longer than the 152 characters (and my screen is larger)
hammer> role filters --name 'Content Manager'
----|------------------------|--------|------------|-----------------|---------------------------------------------------------------------------------
ID | RESOURCE TYPE | SEARCH | UNLIMITED? | ROLE | PERMISSIONS
----|------------------------|--------|------------|-----------------|---------------------------------------------------------------------------------
153 | Katello::ActivationKey | none | yes | Content Manager | view_activation_keys, create_activation_keys, edit_activation_keys, destroy_a...
154 | Katello::ContentView | none | yes | Content Manager | view_content_views, create_content_views, edit_content_views, destroy_content...
155 | Katello::GpgKey | none | yes | Content Manager | view_gpg_keys, create_gpg_keys, edit_gpg_keys, destroy_gpg_keys
156 | Katello::KTEnvironment | none | yes | Content Manager | view_lifecycle_environments, create_lifecycle_environments, edit_lifecycle_en...
157 | Katello::Product | none | yes | Content Manager | view_products, create_products, edit_products, destroy_products, sync_products
158 | Katello::SyncPlan | none | yes | Content Manager | view_sync_plans, create_sync_plans, edit_sync_plans, destroy_sync_plans
----|------------------------|--------|------------|-----------------|---------------------------------------------------------------------------------
Generally speaking the other roles that occurred to be were:
- View on all the things Content Manager manages (could just extend Viewer)
- View all the things Release Manager manages (could just extend Viewer)
I haven't made these yet but will likely soon.