A custom role is a user-defined role covering access to:

When selecting this role type, configure the following settings.

Authorization Tag

The name of a new authorization tag. 

Permissions

The permissions granted by the role on the entities with the Authorization tag

The default roles do not grant permissions to manage Bulk Certificates. These permissions must be manually selected when creating a custom role.