What do the access-rights service, the trust service and the logging service do?

The access-rights service (Zugriffsrecht Service) manages the rules for using a digital resource, defined on the basis of authentication, attributes, access context or own models such as groups, roles and individual permissions; the trust service maintains the accepted, trustworthy IAM service providers and relying parties of an IAM system; the logging service documents at runtime the use of an IAM service so support can clear up problems.

Together they cover definition time (rules and trust) and runtime (evidence of what happened).