...

The JS7 - Security Architecture includes the use of JS7 - Identity Services for JS7 - Authentication and JS7 - Authorization.

...

Finely-grained permissions are available for access to JOC Cockpit functions, see see the JS7 - Default Roles and Permissions article for detailed information. 

Permissions and roles are managed using the JOC Cockpit. User accounts and role assignments can be managed using either the JOC Cockpit Identity Service or external Identity Services. See See the JS7 - Management of User Accounts, Roles and Permissions article for more information.

Use of Identity Services

...