What is used to control access to features and capabilities in applications and modules?

• A. Roles
• B. Permissions
• C. Access Controls
• D. Groups

Answer: (A)

Roles are the mechanism that determines what a user can see and do in the system. When a user has a role, that role provides a set of permissions that unlocks features and modules in the application navigator, enabling actions like creating records or using specific functionalities. Because roles bundle these permissions, they are the natural way to control access to features and capabilities across applications and modules. Groups organize users but don’t grant access by themselves, and access controls regulate data-level rights (read/write on records and fields) rather than overall feature access.