A User can have multiple Roles. A Group can have multiple Roles. A role can be assigned to multiple Users or Groups.