Role-Based Access Control (RBAC)
An access model that assigns permissions to roles, and roles to users, instead of managing individual grants per person — the model that actually runs most enterprises.
aka: RBAC
RBAC’s whole value is indirection: administrators manage a small number of roles instead of a permission per person per resource, and governance — knowing who has which role and why — becomes tractable. Its characteristic failure is role explosion, where teams keep minting narrower roles to express resource-specific exceptions instead of layering attribute-based rules on top of a small role set.