# RBAC

> A conceptual representation of access control, Role-Based Access Control (RBAC), in which permissions attach to roles and users receive roles.

Record: `architecture:role-based-access-control`
Kind: model
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: contextual
Scope: user, role, resource
Aliases: Role-Based Access Control
Canonical: https://banes-lab.com/ontology#architecture-role-based-access-control

Listed in [Architecture principles](https://banes-lab.com/api/records/architecture.md), after [Access Control](https://banes-lab.com/records/architecture/access-control.md) and before [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md).

## Repair

- Refactored by: Centralize Role Policy
- Detected by: scattered role checks
- Violated by: hardcoded user-specific access logic
- Measured by: role-policy consistency
- Enforced by: authorization tests

## Requires

- [Role Definitions](https://banes-lab.com/records/lexicon/role-definitions.md)

## Reinforces

- [Access Control](https://banes-lab.com/records/architecture/access-control.md)

## Enables

- [Coarse-Grained Permission Management](https://banes-lab.com/records/lexicon/coarse-grained-permission-management.md)

## Conflicts with

- [Ad-Hoc Permission Checks](https://banes-lab.com/records/lexicon/ad-hoc-permission-checks.md)

## In tension with

- [Role Explosion](https://banes-lab.com/records/lexicon/role-explosion.md)

## Tensions

- [RBAC / Role Explosion](https://banes-lab.com/records/tension/rbac-role-explosion.md)

## Severity

- [contextual](https://banes-lab.com/records/vocabulary/severity-contextual.md)

## Category

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/records/architecture-category/security-privacy-compliance-governance.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)
- [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md)
- [Severity levels](https://banes-lab.com/ontology/schema/the-vocabulary-severity.md)
- [The resolutions](https://banes-lab.com/ontology/schema/the-resolutions.md)