Which group of permissions is used to control Application and Module access?
Roles control access to features and capabilities in applications and modules.
https://developer.servicenow.com/dev.do#!/learn/learning-plans/xanadu/servicenow_application_developer/app_store_learnv2_securingapps_xanadu_roles