Users are assigned a unique role within a catalog. This is often used in enterprise deployments with numerous and complex catalog permissions.