Associate one or more roles with an access group. Roles are additive. If you add more roles to an access group, you add more authorization. You can associate privileges with one or more roles.
Determine the roles you need for your application. You can use the Pega Warranty roles as a starting point.
Determine the privileges of each role.
Associate each role with an access group.
For more configuration information, see Access groups.