Role-Based Access Control

RBAC

Kind: model

Layer: Security Core

Aliases: RBAC

Record: architecture:role-based-access-control

Severity: contextual

Scope: user, role, resource

Canonical: Ontology

A conceptual representation of access control, Role-Based Access Control (RBAC), in which permissions attach to roles and users receive roles.

Listed in Architecture principles, after Access Control and before Attribute-Based Access Control (ABAC).

Requires

• Role Definitions

Reinforces

• Access Control

Enables

• Coarse-Grained Permission Management

Conflicts with

• Ad-Hoc Permission Checks

In tension with

• Role Explosion

Tensions

• Role-Based Access Control (RBAC) / Role Explosion

Violated by

• Hardcoded Rules

Refactored by

• Centralize Policy

Severity

• contextual

Category

• Security / Privacy / Compliance / Governance

Refactors

• Authorization Scattering

Linked from

• Anti-patterns
• Security / Privacy / Compliance / Governance
• Security Privacy Compliance
• Severity levels
• The resolutions