A possibility is to create blocks of user/role/group combination in the domain model (using PL IDM), then reference them in the login module.
Reply to this message by going to Community
Start a new discussion in PicketBox Development at Community