A given user can be assigned to multiple roles.

Yes, users may belong to multiple roles (Example: 'Agent' AND 'Top Secret', vs. 'Agent' AND 'Classified'. There is not limit to the amount of roles that any one user can belong to.