I am working on jackrabbit, how can roles/groups be distinguished from users?