Definition
Role-Based Access Control (RBAC) is a model for assigning permissions in which access to resources follows an assigned role rather than the user's Identity directly.
Human Explanation
Instead of granting permissions to each person separately, an organisation creates roles such as administrator, accountant or operator and assigns users to the appropriate roles.
Why it Matters
RBAC simplifies access management, reduces administrative errors and helps maintain consistent permissions.
Conceptual Boundary
RBAC does not by itself consider current context or user attributes. Permissions follow the assigned role.
Practical Perspective
Well-designed roles are much easier to maintain than individual permission sets for every user.