As the size of an organization increases, the need to have structured roles (aka Business Rules) is paramount. Role Modeling is a key factor when designing a well-thought-out security model for any identity management implementation. The process starts with basic “Role Mining” to determine the resources required for each job responsibility. Then design roles or business rules (aka Role Generation) into groups or classifications. For example, the “Jr. Accounting Role” requires access to QuickBooks and the invoice folder. The “Sr. Accounting Role” requires the same access along with the accounts receivable folder. How an organization designs its roles is based on many factors. They are typically based on job titles and entitlements, but other factors such as building location or department are used. For example, here are two different ways to group two roles. Role: Jr. Accounting Job Titles: Jr. Accounting, Level 1 Accounting, Accounting Entitlements: QuickBooks, Invoice Folder Role: Sr. Accounting Role Job Titles: Sr. Accounting, Accounting Manager Entitlements: QuickBooks, Invoice Folder, Accounts Receivable Folder OR Role: Accounting Job Titles: Jr. Accounting, Level 1 Accounting, Accounting, Sr. Accounting, Accounting Manager Entitlements: QuickBooks, Invoice Folder Role: Sr. Accounting Role Job Titles: Sr. Accounting, Accounting Manager Entitlements: Accounts Receivable Folder