Modify Membership in an Application Role
Valid members of an application role are users, groups, or other application roles.
The process of becoming a member of an application role is called mapping. That is, being mapped to an application role is to become a member of an application role. Best practice is to map groups instead of individual users to application roles for easier maintenance.
To add or remove members from an application role: