So not just who gets access to the app, but precisely what they can access once they're using it. This can be critical in many business apps, which means it's also critical to manage those roles ...