A particular role cannot access a class unless that access is explicitly granted in an access role obj rule. Therefore, you must be sure that any new role you create has the appropriate access to all necessary classes or that it is combined with other roles in an access group that together provide the class access needed by the group

A role can inherit access to a class from a parent class, so you do not necessarily have to create an access role obj rule for every class in your application. For more information on class inheritance, see online Help or the Community.