The process of assigning a role to a user, such that the user has the appropriate access permissions for the object defined for that role.