In Dynamics 365 security, a Role is the highest level, representing a job function. A Role contains one or more Duties, which represent a grouping of related tasks. A Duty contains one or more Privileges, which are the actual permissions required to perform a specific task. To grant access to specific Fields and Tables (securable objects), permissions must be defined at the Privilege level. While a Privilege can be assigned directly to a Role, the standard hierarchy used for organization-wide security is Role → Duty → Privilege → Permissions (securable objects).

Microsoft Learn: Role-based security in Finance and Operations apps. Section: "Security architecture of Finance and Operations apps."

Microsoft Learn: Create or modify security privileges, duties, or roles. Section: "Security model hierarchy."

Microsoft Dynamics 365 Documentation: Security elements and their relationships. Figures detailing the many-to-many relationships between Roles, Duties, and Privileges.