Which roles to use to secure custom OTBI Objects

Summary

In Otbi I see job roles, Duty Roles and Privileges what should I use to secure custom content in OTBI catalog

Content

All,

When setting up custom folders in OTBI and granting security to the content in these folders,which roles are you all using to grant access to the content in these folders.  Please note that we are planning on granting these seeded roles at the folder level that will then cascade down to all of the object contained this this folder. We are not willing to do user granted security or object level security as we have found these to be very problematic with OBIEE on premise.