Role-based access control (RBAC)

What is role-based access control (RBAC)?

Role-based access control (RBAC) assigns access rights based on roles rather than individually per person. Users receive rights through their role, such as accounting or project lead, which simplifies permission management.

How does RBAC work?

Rights are assigned to roles, and roles are assigned to users. When a person's task changes, their role is adjusted instead of maintaining many individual rights. This reduces errors and effort.

What are the benefits of RBAC?

• Clear, auditable rights assignment
• Fewer misassigned permissions and less admin effort
• Supports the principle of least privilege
• Eases audits and compliance evidence

How SecureCloud implements RBAC

SecureCloud offers granular, role-based access rights via Advanced Access Management, combined with a complete audit log. This keeps companies in control of who accesses which data, and able to prove it.

What is the difference between RBAC and ABAC?

RBAC assigns rights based on roles. ABAC (attribute-based) decides based on attributes such as department, location or time, and is more fine-grained but more complex.

How does RBAC relate to least privilege?

Through clearly defined roles, each person gets only the rights they need for their task, the practical implementation of least privilege.

Does RBAC help with compliance?

Yes. Auditable, role-based rights assignment with an audit log eases evidence for GDPR, ISO 27001 and NIS2.