Question on orchestrator server to form user in groups with different roles

I want to know the process on how to form user in groups. And also different groups has some different permission. For example, Group A can only see robot without update.