# RBAC / Role Explosion

> "role-based-access-control" (security-core layer) is traded against "Role Explosion" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Role Explosion" and choosing an explicit operating point.

Record: `tension:rbac-role-explosion`
Kind: tension
Canonical: https://banes-lab.com/ontology/schema#tension-rbac-role-explosion

## tensions-with

- [RBAC](https://banes-lab.com/records/arch/role-based-access-control.md)
- [Role Explosion](https://banes-lab.com/records/lex/role-explosion.md)