User Access is controlled by setting the access rules for each particular Role. There are be many Roles setup in the application, but for each Role there is an access rule that applies.

Once Roles are setup, then the User is assigned to one Role or another and may, in fact, have 2 or more Roles, but ONLY ONE Role is occupied at a time.