RBAC features are defined in
db/fixtures/miq_product_features.yml. These are
organized in a tree structure that can be seen in the Role editor under
RBAC features are assigned to roles. For the built-in roles this is predefined in
RBAC checking is done for every action and every button in
ApplicationController. Therefore each button, each menu item and each
screen needs to have its RBAC feature.
More detailed RBAC checking is done in individual actions both in the UI and the API.