Roles exist to harness a users/devices access to a sites specific apps and inputs. You use roles to better define a groups permissions within the app in order to control who has access to what. Specific User/Device permissions will overwrite any of their roles, permissions.