I think this will help you to understand.

Security measures are implemented using role-based security, which is dependent on the role allocated to users in the organization. We can then approve users based on their organizational roles. Users, administrators, and guests, for example, have different levels of access to Windows.