Platform Operators are responsible for the mapping of proejct roles onto platform roles.

The mappings are configurable per Landing Zone and there is also a default mapping per platform.

Currently platform operators can not see the default roles when editing the landing zone mapping.

It's not clear what impact the "suffix" field (the one after the → arrow) has on replication.