Hi. I don't have an answer for you, sorry, but a question. To get "WebApprovers" to display in your access rights, did you have to do anything outside of add it to the config?

I am trying to add roles, but they simply do not appear within the CMS as your WebApprovers has. 

Are you using standard logins and roles as managed provided by Optimizely CMS? The big change we have made is to use SSO with Azure AD, and I wondering if that is what is buggering everything up for me.

Hi Bernard,

Short answer no, there is not a way to separate them.

When you publish it will modify the data and update the published date and possibly a few other fields hence the ability to publish needs change rights also.

Thanks

Paul