Who is authorized to perform work within the enterprise?

How does an enterprise establish people, roles and access for its operational work?