Role-based access control

What is Role-based access control?

A security paradigm that restricts system access to authorized users based on their specific job functions and responsibilities within an organization.

Also known as: Role-Based Access Control (RBAC)

In other languages

한국어역할 기반 액세스 제어

사용자의 직책이나 역할에 따라 정보 시스템에 대한 접근 권한을 차등 부여하는 보안 관리 체계이다.

日本語ロールベースのアクセス制御

ユーザーの役割（ロール）に基づいてシステムやデータへのアクセス権限を制限するセキュリティ手法。

Related Terms

• Role-based permissionsAccess-control method that grants capabilities according to a user's assigned role within a system
• Policy-Based Access ControlAn access control method that grants or limits access according to policies evaluated against defined criteria.
• RBACAccess-control method where permissions are assigned to roles rather than individual users
• Row-level securityA security mechanism that restricts database record access based on the characteristics of the user executing a query.
• Column-level securityA data access control method that restricts which fields or columns a user can view based on that user's permissions.
• ABACAccess control method that grants permissions based on attributes of users, resources, and environment
• Least-privilege accessA security practice that grants users or processes only the permissions needed to perform their assigned tasks
• Access control listA set of rules specifying which users or groups can access a resource and what actions they may perform.
• Capability-based securitySecurity model where access to resources is granted through unforgeable tokens that must be presented to perform an action
• Authorization checkSecurity control that verifies whether a user has permission to perform an action
• Identity controlsRules and systems that verify a user’s identity and determine which resources that user may access.
• Identity and access managementFramework of policies and technologies to ensure the right users have appropriate access to resources