← Back to glossary
🧩

RBAC (Role‑Based Access Control)

Security

Authorization model using roles as permission bundles.

Definition

RBAC is an access control model where permissions are associated with roles and users acquire permissions by role membership, enabling consistent policy enforcement.

In plain English Authorization model using roles as permission bundles.

Why this matters

Why it matters: It supports least privilege and reduces policy drift in complex systems.

Example

Example: Admin, moderator, and user roles with scoped capabilities.