AttributeDef

Designated as permission type of attribute

Configured to have actions: read, write, admin

AttributeName

aka PermissionName

Group

designated as Role

Action: read