A mapping between one or more security roles and one or more methods that a member of a role can call.