The document discusses the differences between role-based security and object-based security in Microsoft Dynamics CRM. Role-based security uses the authentication and authorization mechanisms of the application server and defines privileges at design time on a system-wide basis. Object-based security applies access rights to individual instances of objects. A privilege grants rights to a class of objects, while an access right only applies to a single object if the user has the required privilege.