Understanding roles and assigning rights