This diagram shows the components of the VPN data model. An Administrator can be associated with a VPNServiceProvider or a VPNSubscriber. The VPNServiceProvider has one or more VPNSubscriber instances. The VPNSubscriber may contain VirtualUsers. A VPNUser belongs to a VPNSubscriber and may belong to a ClosedUserGroup. The VPNUser is associated with a Person. The ClosedUserGroup and VPNUser reference VPNProfiles. A VPNProfile contains AccessControlItems and may refer to a WorkingTime.