Resources, roles, access rights, and initial access control settings