Add section on GA roles (#834)

Co-authored-by: Jessica Wright <[email protected]>

Author: nvitucci

modules/ROOT/pages/user-management.adoc

@@ -434,6 +434,41 @@ The predefined roles take the following format: `console_<role>_<dbid>`, for exa
 User management within the Aura console does not replace built-in roles or fine-grained RBAC at the database level.
 ====
 
+[[graph-analytics-roles]]
+=== Graph Analytics roles
+
+Console roles map to privileges in Graph Analytics sessions as described below.
+Graph Analytics privileges *do not change across Aura tiers*.
+
+.Predefined roles and database privileges
+[options="header", cols="3,^,^,^"]
+|===
+| Privilege
+| Viewer
+| Member
+| Admin
+
+| Create sessions
+|
+| {check-mark}
+| {check-mark}
+
+| Use active sessions (own only)
+| {check-mark} footnote:role-change[Only possible if the user has previously created a session while having higher privileges.]
+| {check-mark}
+| {check-mark}
+
+| List sessions
+| {check-mark}
+| {check-mark}
+| {check-mark}
+
+| Delete sessions
+| {check-mark} footnote:role-change[]
+| {check-mark}
+| {check-mark}
+|===
+
 === Invite users
 
 * As an _Admin_, go to *Users* from within a project, and select *Invite users*.