In computer system security, access control is often used as an approach to restrict system access to authorized users. Role-based access control is a particular approach wherein, within an organization, roles are created for various functions. The permissions to perform certain operations are assigned to specific roles. Users or other entities or “subjects” are assigned particular roles, and through those role assignments acquire the permissions to perform particular system functions. Since the subjects are not assigned permissions directly, but only acquire them through their role (or roles), management of individual rights becomes a matter of assigning appropriate roles to the subject rather than individual permissions for each and every subject.