Figure 1 shows a user assigned to a role. Based on the role setup, the user has permission privileges over certain categories of authorization. See Figure 1 for the Access Permissions screen that matches the example in Figure 1.
Figure 1. Access Control Assignment Example
In the example, an administrator created the Night Guard role with Operate and Manage Energy privileges over the authorization category HVAC. The role also has Intervene privileges over the Fire category. Assigning Smith (User A) to the Night Guard role gives Smith all access permissions defined by the particular role; therefore, Smith has access to all HVAC objects (items) using the actions defined by the privileges Operate and Manage Energy, as well as the Intervene privilege with Fire objects.