Question: what are the differences among user group and role management?
Answer: A group is a collection of users with a given set of permissions assigned to the group (and transitively, to the users). A role is a collection of permissions, and a user effectively inherits those permissions when he acts under that role. Typically your group membership remains during the duration of your login.