Roles are used to express functions or access control privileges that UserAccounts may have.