Thus, authorization is granted by associating a person with a role on a business object.

因此，权限是通过将人员与业务对象上的角色相关联来授予的。