Custom button security

Hello,

I am looking to enable/disable a button based on whether a user is in a certain functional group. What is the best way to do this? One way possibly is to build an entity schema query to pull a user's role information, but I haven't been able to find details on the object that contains user->role associations.

Any feedback is appreciated. Thanks!

Allen