Role-Based Access Control

Role-Based Access Control — An authorization model that assigns permissions to roles and grants users or workloads access through role membership.

Cybersecurity Context

RBAC is simple to reason about when organizational roles are stable, but role explosion can occur when environment, resource attributes, time, or context must influence decisions. Least privilege still requires disciplined permission design and role review.

Related Security Concepts

• ABAC
• least privilege
• authorization
• role explosion