Proposal for capabilities

Can users have roles that distinct from accounts?