Candidate RBAC data model