ERD: Key RBAC Actors
•Management Role – functional role derived from a single parent
•Management Role Definition – parent for derived Management Roles
•Group – collection of users from external system. Can be used as a role
•SetGroup “Query-Based Collection” – query set of resources or People
Person – primary actor
OrgRole – Business Role
OrgZone – Organizational Location
OrgRoleOrgZone – assignable business role + organizational location/context
