A user is an individual to whom you provide resources. You provide access to users for specific BIG-IQ system functionality through authentication. You can associate a user with a specific role, or associate a user with a user group and then associate the group with a role. A role is defined by its specific privileges. A user group is a group of individuals that have access to the same resources. When you associate a role with a user or user group, that user or user group is granted all of the role's corresponding privileges.