What is Role-Based Access Control
Role-based access control
RBAC (Role-Based Access Control) is an access management model where permissions are assigned to roles rather than individual users, and users are assigned roles.
Core Concepts
- User — employee or system
- Role — set of permissions (Admin, Editor, Viewer)
- Permission — right to perform action (read, write, delete)
- Resource — access target (file, record, API)
Benefits of RBAC
- Simplified access rights administration
- Compliance with principle of least privilege
- Quick permission assignment for new employees
- Role-based access auditing
- Reduced risk of human error
Typical Roles
- Super Admin — full access to everything
- Admin — user and settings management
- Manager — reports viewing and team management
- Editor — content creation and editing
- Viewer — read-only data access
Implementation in Systems
- AWS IAM Roles
- Kubernetes RBAC
- PostgreSQL Row-Level Security
- Active Directory Groups
- Keycloak Realm Roles