Protection can be applied to non-file resources
Solaris 10 provides role-based access control to implement least
privilege
Privilege is right to execute system call or use an option within
a system call
Can be assigned to processes
Users assigned roles granting access to privileges and
programs