# Role-Based Access Control **Aliases:** RBAC **Entity class:** Access-control model ## Definition **Role-Based Access Control (RBAC)** assigns permissions to defined organizational or functional roles and then assigns users to those roles. It reduces ad hoc per-user privilege assignment but requires accurate roles, reviews, separation of duties, and audit. ## Relationships - **used by:** [[wiki/Case Management and Analytics Platform|CMAP]] and [[wiki/Enterprise Lakehouse|Enterprise Lakehouse]]. - **complements:** [[wiki/Case-Level Security|case-level security]], identity management, and audit logging. - **governs access to:** systems of record, analytical platforms, and partner data. ## Sources / Provenance - [NIST — Role Based Access Control](https://csrc.nist.gov/projects/role-based-access-control)