The roles in the system are defined using this window. Items that require the defined roles can also be specified using the authorization nodes window. Finally on the right side of the window are the user groups that have this role (which can be defined using the user groups window as well).