L8 Controller Security Features

Anyone have experience with the 1756-5580 controllers? I'm specifically curious about the role-based access control that Rockwell is boasting about. The following bullet point is from the associated link:

• Includes controller-based change detection and logging, digitally-signed controller firmware, and role-based access control for extra security

https://www.rockwellautomation.com/en-us/products/hardware/allen-bradley/programmable-controllers/large-controllers/controllogix/1756controllogix5580.html

The L7 controllers also have controller-based change detection and logging. It's just been expanded in the L8 from logging 100 to 500 events in the controller's memory. But they're making it sound like it's a brand new thing.

The above bullet point also makes it sound as though the role-based access control feature is embedded in the controller, and therefore would not be dependent upon the FactroyTalk Admin Directory. Is this true and if so, how do you use this feature? Would you apply the FactoryTalk security when creating the project and it just remembers the permissions? Or is this advertising blurb a bit misleading, like making the change detection and logging sound like a whole new thing?

Anyone?