Authentication and Identity Management - What's the Difference Between a Policy-Based and a Role-Based System?

Most applications start with statements of privileges in terms of their authorization. Role management, it grouped privileges into a container and then gave that container the role to the individual. So as a vice president, I can read all financial records as a director. That would be an example. The problem was we often have data that has attributes that are important to the way it is used.