1. A method comprising: at a computing device having one or more processors and memory storing one or more programs for execution by the one or more processors: identifying a request from a user associated with a user role, wherein the request corresponds to: an application request to access a first module in an enterprise application; and a data request to access a first portion of a database through the first module; responsive to a first determination that, based on the user role, the application request by the user is permissible: granting the application request to access the first module in the enterprise application; and responsive to a second determination that, based on the user role, the data request by the user is permissible: granting the data request to access the first portion of the database through the first module; wherein the user role is associated with a plurality of access permissions; each access permission in the plurality of access permissions specifies: an exclusive set of application requests permitted to the user role; and an exclusive set of data requests permitted to the user role.