This diagram depicts the authorization model. Sites, applications, users, and roles are configurable in WEM Admin. Groups and ACLs must be configured in the WebCenter Sites Admin interface. They are exposed in WEM Admin.