A role that defines the access levels that users have and the specific resources that they can modify at those levels.