OLE uses Kuali Identity Management software, which is a Kuali-wide application that handles users, roles and permissions. KIM is part of RICE. OLE interacts with KIM to determine what permissions a user has and to define workflow responsibilities.
An important aspect of KIM is that you do not assign permissions directly to staff. Instead, permissions and responsibilities are assigned to roles. People, or groups of people, are attached to the role. A document describing OLE's use Use of KIM is here: https://docs.google.com/a/kuali.org/document/d/1l1qnZ0r4NkZEUGCMOWotB7BKbcp-EsQa1YZF33-GjKw/edit
OLE User documentation is here: http://site.kuali.org/ole/1.5.8/reference/webhelp/ADMIN/content/ch07.html
Roles and permissions are being refactored for 2.0. You can look at the refactoring that is being proposed here: https://docs.google.com/a/kuali.org/spreadsheets/d/1zknelU2sH3CwkY2LX0ReUgkb94j8yYUikHlhRn8XiG8/edit#gid=213354040
A workbook that defines the tables required to load roles and permissions as part of the data build is here: (in draft) (link to come.)- draft is available to assist you in determining how roles, permissions and responsibilities should be assigned to staff.
Roles and Permissions required by OLE are defined in the technical documentation at OLE Roles and Permissions - draft. These are the roles that may be REQUIRED or OPTIONAL for your staff assignments.