Understanding User / Group Role Definitions