What colon mean in k8s rabc in clusterrole, role, clusterrolebinding, and rolebinding?

[dyrnq]

eg. system:controller:generic-garbage-collector system:kube-scheduler

kubectl get clusterroles,roles,rolebindings,clusterrolebindings -A

xref kptdev/kpt#899