...
The EmpowerID RBAC model is one that reflects the Resource-Based Access Control paradigm; the platform is resource-centric, not role-centric. This allows organizations to focus on what they are protecting.
EmpowerID has three tiered RBAC model.
...
Business Role: Business Role is a user-defined hierarchical container for grouping people. For more details please click here.
Management Role: Management roles are also known as functional roles. For more details please click here.
Technical Role: Technical roles are also known as resource roles or access level assignments. This is used to authorize operations performed in EmpowerID or grant native permissions to be pushed to external systems.
Three central identities in EmpowerID role management system are as below:
...
Core Identity: Core identity is top level identity that represents a human being. One core identity can be linked to multiple person identity (or persona) that may have separate access. These all personas are the same person (core identity).
...