In the final security setup step, you link users, roles, entities, and domains.

Go to Role Membership Maintain (36.3.6.6). Select either a user, role, domain, entity, or a combination, then click Apply. Link a user to a role for the entities that the user has access to (entity by entity).

A user can have different roles in each entity.