In Drupal, a tool for controlling access to content creation, modification and site administration at the application level.