This diagram shows the mapping of application roles to users and groups. There are two parallel rectangular boxes labeled ID Store and Policy Store. ID Store contains various users and user groups such as Training, Development, and some other individual users. Policy Store contains two application policies namely Application Policy1 and Application Policy2.

Application Policy1 has three roles namely System Manager, System Developer, and System Analyst. Application Policy2 has three other roles namely Director, Instructor, and Lecturer.

There is an arrow from Training in the ID Store box that connects to Instructor under Application Policy2 in the Policy Store box. Similarly, there are other arrows connecting the user groups or users to specific application roles.

Additional explanations are provided in the surrounding text.