Glossary · Security
Role-Based Access Control(RBAC)
A model that grants permissions to roles, then assigns users to those roles, rather than assigning permissions to each user individually.
Browse all definitionsIn detail
Role-Based Access Control (RBAC) is the standard pattern for organising permissions in any application with more than a handful of users. Roles like "admin", "clinician", "finance" or "support" carry permissions, and users inherit permissions through their role. The advantage is that adding a new user is a single role assignment, and changing permissions for an entire role propagates instantly. Most identity platforms (Microsoft Entra, Auth0, Okta) and most databases, including Postgres, support RBAC natively.
Apply the definition
Want to talk through how this applies to your business?
Start with the decision in front of you. We will help map the fit.