In PAL we use Groups for enabling roles to different users. Within PAL an AWS IAM role may be assigned different resources. But these roles are not the same thing as a PAL Group.