I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right.

I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the users one by one.

Now in the Assign Roles screen, i have global roles like administrator, read only etc... and i have project specific roles like prod_a_developer, prod_b_developer...

For each user, do i have to both assign one of the global roles for him and also assign a specific project role ?

Also, how do i assign a user to a group ? instead of assigning each user a global role i want to assign a group a global role.

not so trivial,

Can someone please help me ?

Thanks.