Roles can be assigned to users or groups defined in an organization. Users or groups who have roles receive all of the permissions associated with the roles.