Each application can have several associated roles. These roles represent typical groups of users associated with the application, such as administrators, readers, editors, designers etc. You can later check in your application code if current user is in the specified role.
You can define roles in the "Roles" section of particular application. Choose a "Roles" node in the main menu tree to view and modify roles for your application.