OLE uses Kuali Identity Management software, which is a Kuali-wide application that handles users, roles and permissions. KIM is part of RICE. OLE interacts with KIM to determine what permissions a user has and to define workflow responsibilities.
A document describing OLE's use of KIM is here: https://docs.google.com/a/kuali.org/document/d/1ACBbrGL8ul-Ln3JOEqLDjo0tEJISsBN9j3NdSCoATNg/edit.
A draft of the OLE User documentation is here: https://docs.google.com/a/kuali.org/document/d/1l1qnZ0r4NkZEUGCMOWotB7BKbcp-EsQa1YZF33-GjKw/edit
Roles and permissions are being refactored for 2.0. You can look at the refactoring that is being proposed here: https://docs.google.com/a/kuali.org/spreadsheet/ccc?key=0AgJJcukYvy-edDRFNEJrUE9RaUlTOG50YnVRRW16SHc&usp=drive_web#gid=0
A workbook that defines the tables required to load roles and permissions as part of the data build is here: (in draft) (link to come.)