Relationships between default groups and application roles