A Privilege Model consists of a set of Roles, role-to-resource
mappings for each Role, a set of users and user-to-role mappings
for each user.
Given a user's Resource assignments, the Privilege Model predicts
which Resources (login IDs, group memberships, etc.) the user should
Return to IT Security Concepts