Cog Glossary Bundle Command Subcommand Group Permission A way to define what commands can be accessed Come with bundles Can be created custom in the site: namespace Examples: operable:manage_commands ec2:delete Relay Role Group of permissions Can be attached to a group Rule Tag User