multiple sites/contexts -- security question

I’m about to set up multiple Revo sites using additional contexts.

Must I configure editors roles etc. separately for each context or will my existing editors role encompass all the contexts??

Insofar as hiding specific documents in the manager, do I need more than one administrator resource group to hide them in??

Just wondering what others do, meanwhile I will test etc.

Thank you, Tom