Role Membership by Role

Roles determine which tasks are enabled for users who are members of the role. They also determines which reports (if any) those users can access.

Users can be members of multiple roles. If at least one of the user's roles grants them access to something, then the user has access—even if one of the user's other roles lacks access.