Managing access rights. It underpins modeling roles and access policies in requirements and architecture.