The disadvantage to this approach is that you lose some of the fine granularity of permission and control that you can have by adding groups specifically based on each role.

• 此种方法的缺点是,您会丢失通过专门基于每个角色添加组才能拥有的权限和控制的部分细粒度。