User, Groups & Roles Concepts - OoB Roles & access controls overview

Currently searching for a kind of overview/access control matrix for all the OoB roles in the standard process applications. Anything available?
Or any kind of best practice regarding the "user,groups and roles" concepts (& user support concept) with Service Now available?