You can define so-called permission levels in SharePoint to grant permissions to objects in a site. These permission levels group together different SharePoint permissions. Permission levels with a unique reference to a site are mapped in the One Identity Manager database as SharePoint roles. You can assign SharePoint roles through groups, or directly to user accounts. SharePoint users obtain their permissions for site objects in this way.
Figure 4: SharePoint roles and permission levels in One Identity Manager