The TSF maintains the roles that carry security management capabilities and associates users with them. Components: FMT_SMR.1 Security roles, FMT_SMR.2 Restrictions on security roles (conditions on the roles, such as separation) and FMT_SMR.3 Assuming roles (an explicit request is needed to take on a role).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.