To avoid having to create and assign a lot of similar roles for individual users, give access to applications to whole classes of users whenever possible.
For example, if you know that you want all project members to be able to view and submit to all project trackers, set the application's permissions to reflect this. You need to configure these settings only once.