This controls what roles are associated to what groups, which in turn controls what users have those roles.

This is the only way we assign roles in this system.

The roles field is a string field but the generators set them up as such.

• modelCreate
• modelRead
• modelUpdate
• modelDelete