1) "security-role" in which context? is that part of the java security model?
2) a Group is a group of people, usually is used in the context of Tasks, where tasks can be claimed if they are assigned to a group. When tasks are claimed (by users) then the task can only be seen by the use who claimed it or an admin.
3) can you share more details? what are you trying to achieve?