RBAC: Part 1, coarse grained access control