Can you create different roles for the different groups of users or are they all user defined?