9. A non-transitory computer-readable storage medium comprising instructions that, when executed by a processor, perform a method for generating roles for a platform, the method comprising: identifying, by a computer system, a set of first user roles that are used to control access to a set of first application programs, wherein: (i) the first application programs are implemented on a first computer platform in which user access to the first application programs is provided through a laptop or personal computer, and (ii) each user role in the set of first user roles is assigned (a) multiple respective users, and (b) one or more of the first application programs to which the multiple respective users have access due to their user role assignment; generating, by the computer system, a set of second user roles that are to be used to control access to a set of second application programs, by generating a corresponding second user role for each user role in the set of first user roles, wherein: (i) the second application programs are implemented on a second computer platform that is a mobile device platform in which user access to the second application programs is provided through use of a particular type of mobile device, and the second application programs are each a mobile application for the mobile device platform, (ii) each user role in the set of second user roles will be assigned multiple respective users, and (iii) each user role in the set of second user roles corresponds to a corresponding user role in the set of first user roles, wherein when the set of second user roles are generated, assignments do not exist between the set of second user roles and the second application programs; accessing, by the computer system, first metadata that is assigned to the set of first user roles; accessing, by the computer system, second metadata that is assigned to the second application programs; comparing, by the computer system, the first metadata that is assigned to the set of first user roles to the second metadata that is assigned to the second application programs to identify a matching portion of the first metadata that matches a matching portion of the second metadata; assigning, by the computer system, a second matching application program from the set of second application programs to a second matching user role from the set of second user roles, due to the computer system having identified that: (a) the matching portion of the first metadata matches the matching portion of the second metadata, (b) the matching portion of the first metadata is assigned to a first matching user role from among the set of first user roles, (c) the first matching user role corresponds to the second matching user role, and (d) the matching portion of the second metadata is assigned to the second matching application program.
9. A non-transitory computer-readable storage medium comprising instructions that, when executed by a processor, perform a method for generating roles for a platform, the method comprising: identifying, by a computer system, a set of first user roles that are used to control access to a set of first application programs, wherein: (i) the first application programs are implemented on a first computer platform in which user access to the first application programs is provided through a laptop or personal computer, and (ii) each user role in the set of first user roles is assigned (a) multiple respective users, and (b) one or more of the first application programs to which the multiple respective users have access due to their user role assignment; generating, by the computer system, a set of second user roles that are to be used to control access to a set of second application programs, by generating a corresponding second user role for each user role in the set of first user roles, wherein: (i) the second application programs are implemented on a second computer platform that is a mobile device platform in which user access to the second application programs is provided through use of a particular type of mobile device, and the second application programs are each a mobile application for the mobile device platform, (ii) each user role in the set of second user roles will be assigned multiple respective users, and (iii) each user role in the set of second user roles corresponds to a corresponding user role in the set of first user roles, wherein when the set of second user roles are generated, assignments do not exist between the set of second user roles and the second application programs; accessing, by the computer system, first metadata that is assigned to the set of first user roles; accessing, by the computer system, second metadata that is assigned to the second application programs; comparing, by the computer system, the first metadata that is assigned to the set of first user roles to the second metadata that is assigned to the second application programs to identify a matching portion of the first metadata that matches a matching portion of the second metadata; assigning, by the computer system, a second matching application program from the set of second application programs to a second matching user role from the set of second user roles, due to the computer system having identified that: (a) the matching portion of the first metadata matches the matching portion of the second metadata, (b) the matching portion of the first metadata is assigned to a first matching user role from among the set of first user roles, (c) the first matching user role corresponds to the second matching user role, and (d) the matching portion of the second metadata is assigned to the second matching application program. 14. The non-transitory computer-readable storage medium of claim 9 , wherein the method further comprises receiving, by the computer system, user input from an administrator that assigns the first application programs to the set of first user roles.