core RBAC model includes a set of sessions (SESSIONS) where each session is a mapping between a user and an activated subset of roles that are assigned to the user.

A mapping involving [digital Subject], [Role] and/or [Permission]