The way the role object abstracts out the permissions from the specific objects they may or may not apply to.