...
With built-in security manager, a tenant admin can create and manage roles directly in a tenant; roles are commonly used in work flows workflows and for digital signatures. See the Manage Roles topic for instructions on creating and managing roles.
...
Access control allows more flexibility when the designer is assigning access to execute forms and flowsworkflows, view/edit form/flow workflow submissions and view the audit trail of an active flowworkflow. Access can be granted to users and/or roles in these three areas. Refer to this Access Control and Shared Items for the details.