Role engineering is the disciplined design, implementation and maintenance of roles. It combines business responsibilities, policy, entitlement data, usage, risk, interviews and ownership to define role contents and membership criteria.
Top-down engineering starts with business functions; bottom-up engineering analyzes existing access; hybrid engineering uses both. The outcome should be reviewed and tested before production assignment.