I have been going through the roles and permissions and think I understand how they will work with a LOB or in house application, ie an app is developed for a sales team and users can be created for that sales team with the roles being defined for each page, section etc. My question relates to commercial applications developed where one does not know who or what the groups or roles will be i.e. for a helpdesk application,there could be a run time group created for London Support, Johannesburg Support, but the roles in e.g. a section are defined at development time.

How is it possible to update the roles within pages, sections etc at runtime, or have I missed the point completely?