User roles and authorization groups

An extensive authorization system exists to control which functions users with specific user roles have access to. These authorizations can also be used to create authorization groups and assign them to individual users.