In practice, we require a role to be assigned to at least a certain number of users in order to meet workload. In addition, the upper bound in a constraint makes sure that the role is not assigned to too many users because of resource restrictions. In contrast, the rolepermission cardinality constraint is satisfied if and only if the number of permissions owned by role is at least l and no more than u