A Role is a group of users. The roles are managed in the System App “User Roles”. Those groups are primarily used to grant access to a group. Having a group instead of assigning access directly to the persons has several benefits. The main benefit is, that users only need to be added to the groups and automatically get access to the Apps using those groups instead of adding the person in each and every App.