This diagram depicts the authorization mode. Applications and users are assigned to sites via roles. Sharing a role to a user and an application on the same site grants to user access to the application on that site. Users are assigned to groups, which control access to applications resources (REST resources). ACLs are assigned to users, providing them with access to the system. Using WEM Admin, general administrators can create and otherwise manage sites, applications, users, and roles. Groups and ACTs must be configured in the WebCenter Sites Admin interface. They are exposed in WEM Admin in the user accounts.