Users may be assigned to one or more groups, as defined in user group administration. Each group assigned controls roles assigned.
More:
Native Group Assignment
Multiple Group Assignments
Automated Group Assignment