What abstraction is primarily used to administer user access in Cloud IAM ?
[ ] Leases, an abstraction of periodic entitlements.
[ ] Roles, an abstraction of job roles.
[ ] Credentials, an abstraction of an authorization token.
[ ] Privileges, an abstraction of access rights.
