In the AMS system, security is managed by two things: Application Roles and Security Descriptors.
...
Roles and security descriptors define user access to a wide range of items, so that you manage trustees who have rights to those items–you do not need to manage access on an item-by-item basis.
For detailed information and instructions on how to create Application Roles, go to Application Roles.
For detailed information and instructions on how to create Security Descriptors, go to Security Descriptorsdescriptors.