✏️ Explanatory Question
Yes, privileges can be directly assigned to a role. However, best practice is to assign privileges to duties, and then assign those duties to roles. This helps maintain modular and reusable security architecture.