Live briefing
Everything about Role-based access control
Approach to restricting system access to authorized users
In information security, role-based access control (RBAC) or role-based security is an approach to restricting system access to authorized users. It is a policy-neutral computer access control mechanism defined around roles and privileges. The components of RBAC, such as role-permissions, user-role and role-role relationships, make it simple to perform user assignments. RBAC can be used to facilitate administration of security in large organizations with hundreds of users and thousands of permissions. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Role-based access controlA 5-minute orientation
- Skim a recent paper: Automated reverse engineering of role-based access control policies of web applicationsInfluential work since 2022
- Pick up a classic book: VA health careThe most-reprinted book on the subject
- Read the landmark paper: Role-based access control modelsCited 4,296 times
- Go sideways: Computer access controlA closely related topic
- Go sideways: Attribute-based access controlA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Role-based access control models
Configuring role-based access control to enforce mandatory and discretionary access control policies
Adding Attributes to Role-Based Access Control
Task–role-based access control model
Role-based access control on the web
Security analysis in role-based access control
Privacy-aware role-based access control
Context sensitivity in role-based access control
🆕 Influential since 2022
Automated reverse engineering of role-based access control policies of web applications
Role-based Access Control (RBAC) Authorization in Kubernetes
Enhancing Network Security in Mobile Applications with Role-Based Access Control
Towards for Designing Educational System Using Role-Based Access Control
Dynamic Optimization of Role Concepts for Role-Based Access Control Using Evolutionary Algorithms
📚 Books worth reading
- 📕VA health careUnited States. General Accounting Office · 1986
Modern Operating SystemsAndrew S. Tanenbaum, Herbert Bos · 1992
Introduction to psycholinguisticsMatthew J. Traxler · 2011
Capital markets of IndiaAlan R. Kanuk · 2007- 📕A revised model for role-based access controlW. A. Janson · 1998
SolarisTM 10 security essentialsSun Microsystems Inc. · 2009- 📕A revised model for role-based access controlW. A Janson · 1998
Security and Trust ManagementAudun Jøsang · 2013
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Computer access control In computer security, general access control includes identification, authorization, authentication, access approval, and audit. A more narrow definition…
- Attribute-based access control Attribute-based access control (ABAC), also known as policy-based access control for IAM, defines an access control paradigm whereby a subject's authorization…
- Discretionary access control In computer security, discretionary access control (DAC) is a type of access control defined by the Trusted Computer System Evaluation Criteria (TCSEC)…
- AGDLP AGDLP (an abbreviation of "account, global, domain local, permission") briefly summarizes Microsoft's recommendations for implementing role-based access…
- Access-control list In computer security, an access-control list (ACL) is a list of permissions associated with a system resource (object or facility). An ACL specifies which…
- Delegation (computer security) Delegation is the process of a computer user handing over its authentication credentials to another user. In role-based access control models, delegation…
- PERMIS PERMIS (PrivilEge and Role Management Infrastructure Standards) is a sophisticated policy-based authorization system that implements an enhanced version…
- Relationship-based access control In computer systems security, Relationship-based access control (ReBAC) defines an authorization paradigm where a subject's permission to access a resource…