Role-based Access Control (RBAC)

Updated 31 Jul 2026

•
def
- •
  granting access based on a user's role within the organization (manager, director, team lead, etc.), so rights are gained implicitly rather than explicitly assigned per user
•
example
- •
  in Windows, group membership is commonly used to implement RBAC (e.g., being in the "shipping" group grants access to shipping software)
•
related
- •
  Rule-based Access Control
- •
  Attribute-based Access Control (ABAC)
•
cards
- •
  Distinguish RBAC from rule-based access control
  - •
    RBAC grants access based on a user's organizational role (implicit); rule-based ccess control uses system-enforced conditions tied to the object itself, not the user's identity

Linked references 3