Difference in roles and rights

Role Based Access Control (RBAC)e

The "Role Based Access Control" method is a design pattern for managing access rights. You don't assign specific rights ("read data set XY") directly to individual users, but to a role ("processor for Z"). Users are then assigned certain roles based on their functions in the company. The access rights are derived from the roles. In identity management system, only roles are usually assigned. Mapping on specific rights usually takes place in the applications. User roles can be assigned globally or at application level in the identity management system.

Application admins can manage rights themselves

The award of the reels does not necessarily have to perform a central IDM admin. Depending on the organizational structure, it may also be useful to assign roles of application admins.