Role & Permissions defines what you can do in the portal:
Affiliation Type defines which data you can access: