Fine grained controlled access privileges to all the system resources.
Flexible and on-line administrator controlled implementation and usage.
Corporations can define organization roles to secure resources and enforce it on members of your corporation by defining access privileges.
As an administrator you can define matter roles to secure all the other resources.