By assigning roles to users or groups, you can control their access to various modules, applications, and data. Roles are usually added to the Group, and Group Members are added to the group that contains the role whenever a user is required to have any role.