What is the difference between a group and a role?

Answer

A group is a set of users; a role is a bundle of permissions that a user activates

Options - A. A group is a set of users; a role is a bundle of permissions that a user activates - B. A group is a bundle of permissions; a role is a set of users holding the same job title - C. A group is defined by an administrator; a role is defined by the resource owner - D. A group applies to files; a role applies to database tables Why - A. Correct — the group names SUBJECTS, which is a discretionary naming convenience; the role names PERMISSIONS attached to a job function, which a user acquires by membership and activates in a session. - B. Precisely transposed, and it is the most common way to lose the mark on this question. - C. Both can be administrator-defined. The distinction is what each one is a set OF, not who creates it. - D. Neither is tied to a resource type. Roles and groups are both general access-control constructs. Say it as one sentence in the exam: a group bundles users, a role bundles permissions. Everything else about RBAC follows from that.

Stallings & Brown, Computer Security 5e, ch4 §4.6–§4.7