I'm not certain about accessing the roles found in DotNetNuke "correctly".  After much experimentation, I found that I can access all of the roles using this class...

DotNetNuke.Security.Membership.DNNRoleProvider

Code like this (ArrayList _objDNNRoles = _objDNNRoleProvider.GetRolesByGroup(0,3) ) will return an arraylist (shouldn't this be List<DotNetNuke.Entities.Users.RoleInfo> or something?) of DotNetNuke.Security.Roles.RoleInfo objects. 

Unlike the somewhat existing convention, you are able to get ahold of a "controller" class.  For example, the DotNetNuke.Entities.Users.UserController can be used to perform CRUD operations with the UserInfo object.

BTW, why is the UserController class in the Entities namespace if it isn't a transfer object (entity)?

I know this has something to do with the glue deal and ASP.NET 2.0 membership.  It is very confusing as what parts of this process are DotNetNuke, what are ASP.NET 2.0 membership and why it is even in this framework.  I want to make certain I am using a solid API call to get this user as well as role information.

Thanks!