CiviCRM Community Forums (archive)

I am confused about how users get access to Civi ACL defined permissions. 

I have set up a bunch of Civi roles and associated access groups.  I have assigned users by adding the access group to their groups.  Or I suppose it is the other way around, I added them to the access group. 

Do I also need to assign them to the Drupal role that allows them access to civi functions manually?  Is there a way to just let the addition to the access group allow them access to civi functions in general?  Or is there a way to update the drupal role automatically if someone is added to designated access groups?

What am I missing? 

Thank you for your help.