RBAC

Role Based Access Control (RBAC) is a model for giving a user access to one or more resources.

Introduction

RBAC is an access control mechanism which:

• Describes complex access control policies,
• Reduces errors in administration,
• Reduces cost of administration.

The NIST RBAC Model uses a limited set of concepts to define an RBAC system as depicted below.
The system has (1) users, users have (2) sessions and sessions and users have (3) roles assigned to them.
Each role consist of (4) permissions and permissions are based on (5) objects and (6) operations.

See also

• NIST CSC RBAC, National Institute of Standards and Technology (NIST), Computer Security Resource Center (CSRC) Role Base Access Control (RBAC) Presentation.