Actually @ben I don’t believe that is the optimal structure.
The role is best linked to the userID rather than a RoleID
This allows the a user to be in two groups simultaneously if required
In the below, RoleID is simply a primary key (used to manage/ delete only)
See Two table approach to user security permissions
