I am your virtual doorkeeper, allocating and supervising individual access rights and authorisations.
In order to do this, I give each entity its own identity with individual access rights or role profiles. In this way I can provide people with their own specific entitlements to resources. This makes me a central authority, forming an interface between users, tasks and resources. All-in-one.