The development, the maintenance, and the administration of a Control Compliance Suite environment encompass several different roles, each with distinct responsibilities. To assign users and groups to a role requires skillful balance. Roles are not designed to completely solve the permission problem or the task problem. Roles create a possible solution.