Roles
Roles provide a way of assigning requirements for a set of users. They are a part of a role-based access control system, along with segregation of duties rules.
Roles can be assigned to users via authorization workflow, or in batches using the userrole program.