Roles
A role defines a security policy, you can assign privileges to roles and then assign roles to users.
You can alter role privileges to database objects.
See also:
Database security