I know that as adopting a "role" for specific actionsand each user account can be assigned zero-to-many "role"s by some authorisation administrator.@kfogel