As an administrator, you control who has access to applications by creating users and providing these users with a means of authenticating themselves to an application. To simplify user administration, users can be collected in groups according to criteria such as the users’ function in a company or the department they work in. Roles define the users’ authorizations and, in the case of portal roles, they additionally define the users’ navigation experience. Roles can be assigned to either users or groups.