The AWS official site reads role as a collection of permissions and group as a collection of users. But still they look the same to me. You attach policies to groups or role
Only one IAM Role can be assumed at a time! And there are several situations which fits exactly this kind of permission.
Read the faq about: How many IAM roles can I assume?
The underlaying tool in use is "Permission" in both of the use cases namely: Group and IAM Role.
Group or IAM Role --> Has Policy --> Policy defines permisions --> Permissions are assigned to a Group or IAM Role.