An access control model where resources are protected by ACLs that are managed by administrators and that provide user permissions based on job functions is known as which?

An access control model where resources are protected by ACLs that are managed by administrators and that provide user permissions based on job functions is known as which?

• A. Role-Based Access Control (RBAC)
• B. Provisioning
• C. Group Account
• D. Permissions

Answer: (A)

Role-Based Access Control is being described. In this model, access rights are organized by roles that reflect job functions. Administrators create roles, assign the appropriate permissions to those roles, and then grant users access by placing them into the relevant roles. When a user tries to access a resource, the system checks the permissions associated with the user’s role rather than directly checking individual permissions for every user. This centralizes management and aligns access with an employee’s function, which is different from provisioning (the workflow of creating accounts), group accounts (a shared account concept), or the raw permissions themselves (the rights rather than the framework that organizes them).

Role-Based Access Control is being described. In this model, access rights are organized by roles that reflect job functions. Administrators create roles, assign the appropriate permissions to those roles, and then grant users access by placing them into the relevant roles. When a user tries to access a resource, the system checks the permissions associated with the user’s role rather than directly checking individual permissions for every user. This centralizes management and aligns access with an employee’s function, which is different from provisioning (the workflow of creating accounts), group accounts (a shared account concept), or the raw permissions themselves (the rights rather than the framework that organizes them).