User groups and roles allow you to control access to nodes, managed devices and ports by creating filters that specify permissions.