What colon mean in k8s rabc in clusterrole, role, clusterrolebinding, and rolebinding?

[dyrnq]

eg. system:controller:generic-garbage-collector system:kube-scheduler

kubectl get clusterroles,roles,rolebindings,clusterrolebindings -A

xref https://github.com/GoogleContainerTools/kpt/issues/899