This workflow controls access by the selected groups. The mappings from group to role depend on the workflow state.

This workflow maps the following roles to groups. Roles not selected are managed outside this workflow.