Define and manage roles and internal/external access privileges, use security-policy enforcement applications, report and monitor apps as well as identity repositories