Access control model where permissions are assigned to roles, and users are assigned to roles.
Role-Based Access Control (RBAC) assigns permissions to roles rather than individuals—users gain access by being assigned to appropriate roles. A 'Finance' role might include access to accounting systems; a 'HR' role might access personnel systems. RBAC simplifies administration (change role definition, not individual permissions), improves consistency (same role gets same access), and supports least privilege (users get role-appropriate access). RBAC is the dominant access control model in enterprise systems.
Why It Matters
The DSC Perspective:
RBAC makes access management scalable and consistent. Define roles based on job functions, assign appropriate permissions to roles, and manage users by role assignment. This simplifies access reviews and reduces errors.