A Namespace is a way to scope both Permissions|keyword=Permission and Entity Attributes|keyword=Entity Attribute. Each Namespace instance is one level of scoping and is one record in the system. For example, 'KC' or 'KC' could be a Namespace. Or you could further break those up into more finer grained Namespaces such that they would roughly correlate to functional modules within each application. Examples could be 'KC Rolodex', 'KC Grants', 'KC Chart of Accounts'.
Out of the box, the system is bootstrapped with numerous Rice namespaces which correspond to the different modules. There is also a default namespace of 'KUALI'.
Namespaces can maintained at runtime through a maintenance document.