We are not using that for now. We have 4 different roles and a fallback role for logged in users without permissions. In the end we have role A, role B, role C, user and anonymous in our database.