This figure illustrates common uses for roles.
The privilege to execute the ACCTS_PAY application is granted to the ACCTS_PAY role. The ACCTS_PAY role is then granted to the PAY_CLERK role and the MANAGER role.  Users with the PAY_CLERK or MANAGER role can then use the ACCTS_PAY application. The privilege to execute the ACCTS_REC application is granted to the ACCTS_REC role. The ACCTS_REC role is then granted to the REC_CLERK role and the MANAGER role.  Users with the REC_CLERK or MANAGER role can then use the ACCTS_REC application.