The roles concept allows you to assign specific properties and rights to users. Normally, user rights are being assigned within the context of user's responsibilities and tasks. In this way, different user rights are summarized in a role and then assigned to multiple users. You don't need to specify permissions for single user accounts. Working with user roles facilitates the administration, especially when modifying the global rights structure.