In general, I started with users. When the app, or whatever I was setting up, got “serious”, switched to roles.