IoT systems can oftentimes require complex access control frameworks. Consider the types of devices and types of users who will operate within your system and define a set of roles that will be granted access to various aspects of IoT system administration and operation. In the following example, roles are defined and include multiple roles for devices (such as, privileged versus regular gateway) and users:
| Role | Definition |
| Gateway | Allows communications with IoT devices and other authorized services. |
| Privileged Gateway | Allows standard gateway functions in addition to being able to manage devices (create/delete/update). |
| Device | Devices that can perform routine operations. They can participate in /publish/subscribe ... |
