Access modeling components

Roles define a user’s functional responsibilities within an application. Each role is composed of a set of permissions needed to carry out that function. When a role is assigned to a user, all permissions associated with that role automatically become available to them.

Permissions define specific actions a user can perform, such as viewing information, updating data, generating outputs, approving items, or performing administrative tasks. Permissions are tied to roles to ensure consistent access for users.

Groups organize users based on common responsibilities, departments, or business functions. Assigning roles to a group allows every member to inherit the same access, making it easier to manage permissions for multiple users who share similar responsibilities.