OLE uses Kuali Identity Management software, which is a Kuali-wide application that handles users, roles and permissions. KIM is part of RICE. OLE interacts with KIM to determine what permissions a user has and to define workflow responsibilities.
A document describing OLE's use of KIM is here: https://docs.google.com/a/kuali.org/document/d/1l1qnZ0r4NkZEUGCMOWotB7BKbcp-EsQa1YZF33-GjKw/edit
OLE User documentation is here: http://site.kuali.org/ole/1.5.8/reference/webhelp/ADMIN/content/ch07.html
Roles and permissions are being refactored for 2.0. You can look at the refactoring that is being proposed here: https://docs.google.com/a/kuali.org/spreadsheet/ccc?key=0AgJJcukYvy-edDRFNEJrUE9RaUlTOG50YnVRRW16SHc&usp=drive_web#gid=0
A workbook that defines the tables required to load roles and permissions as part of the data build is here: (in draft) (link to come.)