Business roles (composition) can be defined on role detail. Business role could contain sub roles - all sub roles are assigned automatically, when business role is assigned to identity. Sub roles has the same validity as business role. When assigned business role is removed from identity, then all sub roles are removed automatically too. Sub roles are processed on the background asynchronously (by processors), only business roles (⇒ direct roles) are assigned synchronously. Sub roles defined by business roles are recalculated on the background (by long running tasks), when business role definition is created or removed - sub roles are assigned to identities, which already owns business (or any superior) role.