You can associate one or more roles with an access group. Roles are additive. The more roles that you add to an access group, the more authorization there is. Privileges can be associated with one or more roles.
Determine which roles are needed for your application. You can use the Pega Government Platform roles as a starting point.
Determine which privileges to associate with each role.
Associate each role with an access group.
For more configuration information, see Groups and roles.