RBAC, Role Based Access Control

Role-based access control or RBAC, can be defined as an individual user’s ability to perform a specific function. This may include viewing, creating and editing a file or gaining access to a web server. User roles may be specified according to competency, authority and responsibility within the organization. When adequately applied, RBAC provides users with an opportunity to complete a variety of authorized tasks. This is made possible by regulating actions in dynamic fashion according to agreeable relationships, constraints and functions. RBAC contrasts more conventional methods of access control in which access is granted or denied on a complex object by object basis. Role-based access control allows roles to created, modified or discontinued with ease. It conforms to the needs and growth of an organization while eliminating the requirement of individually updating privileges for each user.