Once you have set up resources and roles, users can be created and assigned to their appropriate roles. The roles for a given user define what assets the user has access to and what the permissions are for those assets