You can click on the green globes in the roles table on the Configuration -> User Access & Roles page. This will allow you to link Active Directory or Windows groups and users to a role, just like in version 5. Doing this will override roles individually set for users.