This graphic illustrates the use of roles. From left to right, top to bottom, there are four categoroies, which are as follows:
The top row shows groups of users.
Following the groups of users, are user roles, which are assigned to each group.
Following the user roles, there are application roles, which point to the appropriate user roles.
Following the application roles are application privileges, which point to each corresponding application role.