This diagram depicts the database, REST, and application levels. Roles control access to sites and applications on the site. Groups in WebCenter Sites control access to REST (applications resources). ACLs control access to the system.