A role that the user must automatically assume, giving it semi-temporary access to a specific set of resources