OLE uses Kuali Identity Management software, which is a Kuali-wide application that handles users, roles and permissions. KIM is part of RICE. OLE interacts with KIM to determine what permissions a user has and to define workflow responsibilities.
A document describing OLE's use of KIM is here: https://docs.google.com/a/kuali.org/document/d/1l1qnZ0r4NkZEUGCMOWotB7BKbcp-EsQa1YZF33-GjKw/editOLE User documentation is here: http://site.kuali.org/ole/1.5.8/reference/webhelp/ADMIN/content/ch07.htmlavailable in draft
Roles and permissions are being refactored for 2.0. You can look at the refactoring that is being proposed here: https://docs.google.com/a/kuali.org/spreadsheets/d/1zknelU2sH3CwkY2LX0ReUgkb94j8yYUikHlhRn8XiG8/edit#gid=213354040
A workbook that defines the tables required to load roles and permissions as part of the data build is here: (in draft) (link to come.)