I choose to use \"Jenkins\'s own user database\" security realm for user login as I couldn\'t use LDAP in my company. And Google\'s OpenID has issue when you decided to change
You could use Role Strategy plugin for that purpose. It works like a charm, just setup some roles and assign them. Even on project-specific level.