This figure illustrates common uses for roles.
The privilege to execute the ACCTS_PAY application is granted to the
ACCTS_PAY role. The ACCTS_PAY role is then granted to the PAY_CLERK role
and the MANAGER role. Users with the PAY_CLERK or MANAGER role can
then use the ACCTS_PAY application. The privilege to execute the ACCTS_REC
application is granted to the ACCTS_REC role. The ACCTS_REC role is then
granted to the REC_CLERK role and the MANAGER role. Users with the
REC_CLERK or MANAGER role can then use the ACCTS_REC application.