Which type of Application Role is used to secure access to the Subject Area?

• A. The Duty Role secures access to the Subject Area.
• B. The Data Role secures access to the Subject Area.
• C. The Read Role secures access to the Subject Area.
• D. The Admin Role secures access to the Subject Area.

Answer: (A)

Access to a Subject Area is controlled by Application Roles that map to how a user performs their job. These roles determine what data a user can see and what actions they can take inside the Subject Area. A Duty Role is the type designed around a specific business function or responsibility, so granting someone a Duty Role restricts access to the Subject Area to what they need for that function. This aligns with giving users the right level of access without over-sharing data, whereas a Read Role is more about viewing in general, Admin Role would grant broad control, and a Data Role focuses on data-level permissions rather than the job-based access to the Subject Area.