Role

  • A role is a grouping (collection) of one or more Permissions.

  • A role can get assigned to a User.

  • When changing a role assignment of a User, all Permissions of all assigned roles will be resolved once and assigned to the user.

    • This is important for performance, as a permission check does not need to resolve assigned roles in runtime.