Dynamic roles are based on person attributes such as department, location, job title, or other properties. Understanding how person attributes map to role membership is fundamental to creating dynamic roles that automatically assign users based on their characteristics. Static roles and provisioning policies are separate concepts.