Upgrading 8.0 security (roles/groups) to 9.0 (roles only) - need a push in the right direction!

Hi, this is the first time I've used the community but it looks like a wealth of information.  We are running ERP8.0 SP24 and are planning to upgrade to 9.0.  As CNC Admin I've reviewed lots of docs and think I am fine with most of the technical area, however I need some information on the security area.  We use Solution Explorer menus, using roles and groups.  My task is to outline the plan for moving our group/role security to the role only security.  Has anyone been down this path that could share some information?  Our users can have numerous roles, which allow them