Role-based access control (RBAC) assigns permissions to roles and roles to users, allowing access to be managed according to job functions or responsibilities. Core RBAC can also support role hierarchies and constraints such as separation of duties.
RBAC simplifies repeatable access, but poorly governed roles can become broad, stale or numerous. Many organizations combine RBAC with attributes, relationships and policy.