Question: what is the difference between roles and groups?
Answer: A group is a collection of users with a given set of permissions assigned to the group (and transitively, to the users). A role is a collection of permissions, and a user effectively inherits those permissions when he acts under that role. ... A role, on the other hand, can be activated according to specific conditions.