Hi Deena newash
In App Security we will be giving access to The module Roles like Admin,User by clicking on the module
while in Module security we will be giving access to Who can access the page and microflow
where as in domain model we will be giving access to read and write
Hope This will help