Page "Database management system" Paragraph 152

; Security: For security reasons, it is desirable to limit who can see or change specific attributes or groups of attributes.

This may be managed directly on an individual basis, or by the assignment of individuals and privileges to groups, or ( in the most elaborate models ) through the assignment of individuals and groups to roles which are then granted entitlements.