in jbpm group and role are sort of same thing. so you can assign user to a group(aka role). But if you have more complex setup of group and roles relationship (like single group has many roles) then I would say you should use only roles in jbpm assignment. Usually you can prefix the role with group name for clarity. Take a look at UserGroupCallback interface as it might come handy to simplify the assignment too.