The Role Binding API describes the relationships between the user-account pairs, or group-account pairs, along with the sets of permissions they are granted (roles).