keycloak-scim/docs/documentation/server_admin/topics/roles-groups/con-comparing-groups-roles.adoc

[id="con-comparing-groups-roles_{context}"]

= Groups compared to roles
[role="_abstract"]
Groups and roles have some similarities and differences. In {project_name}, groups are a collection of users to which you apply roles and attributes. Roles define types of users, and applications assign permissions and access control to roles.

<<_composite-roles,Composite Roles>> are similar to Groups as they provide the same functionality. The difference between them is conceptual. Composite roles apply the permission model to a set of services and applications. Use composite roles to manage applications and services.

Groups focus on collections of users and their roles in an organization. Use groups to manage users.