...
User Accounts are located under All Users and are displayed by group (defined under Groups) and/or business unit (if one is assigned). An account's key purpose is to allow a user to log in to the system. Each user account is unique, (must be created separately for each user), and holds basic account details such as profile information and password, together with assigned permissions and access rights. The profile information and password are for authentication and the assigned permissions determines the level of a user to view or make changes to VMS contents.
...
The Groups section holds all user defined groups. Groups are collections of users separated by function (includes business units). All users belong to one or more groups all groups are linked to one or more roles, group membership indirectly establishing the access rights (or permissions) of a user. A role is a user defined position with a specific set of ascribed permissions. The assigned permissions determine what actions a user is allowed to take on specific areas within the system. For example, a user can be authorized to read or change a specific page. Permissions cannot be directly linked to an individual user. Roles are located in the Roles section.
...