Roles are a way of abstracting principle functions. A web application is no different from, say, a bank servicing its clients. Consider that relationship between principles, roles, and resources.