Figure shows how users are assigned to groups, how users and groups are assigned to roles, and how applications use groups and roles.