Understanding roles

System

Does a user need to be in a role to have access to a branch?

We currently utilize Active Directory groups for branch access and another group to restrict the workarea access.

After migrating(iwusermigrate and iwaccessmigrate) the workareas look good but the branches get confusing.

My assumption is I can go into CCpro and add groups to the users and role setting and then defining a role.

By doing this it appears you lose the ability to click on the group from the ccpro window and see a description.

Does this appear to be the right track for branch access?