Roles bundle related privileges together. You grant a role to users rather than granting individual privileges. This simplifies privilege management - grant or revoke once on the role, not per user per privilege. Roles are the proper abstraction for permission management.