Role assignment is the act of assigning a role (e.g., "admin", "editor") to a user or group for a given resource. In Oso, this is a key way to grant permissions, typically via membership or a grant model.