USER: A user is an individual person’s account
GROUP: A group is a collection of users (i.e. a class of students).
GROUP TYPE: A group type is a container that can hold multiple groups (i.e. group type “students” contains all the groups of students. This means that all students can be assigned to one kind of app or activity quickly using the group type “students”).
USER ROLE: A role is a label that can be assigned various permissions to do things (like edit pages or administer the site). A role is assigned to a user account.
APPLICATION ROLES: Application Roles are permissions to be able to do things in apps. For example the site app has the roles: editor, publisher or viewer. These allow users assigned with these roles to do different types of action in that app. For example, a publisher can edit and publish pages to the website. An editor can only edit and save drafts.