What is best practice for creating different user role for service provider in domain terms?

Summary:

What is best practice for creating different user role for service provider either in SERVPROV domain or Customer Domain?

For Instance: We have requirement to create carrier operation and carrier finance role with respective to their uses.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):