Plain-English meaning
Role-based access control assigns permissions through defined roles rather than configuring each user independently.
Why it matters in a software decision
A workable role model reduces inconsistent access and makes joiner, mover, leaver, and audit work easier to manage.
Where you may see it
Administrator consoles, security documentation, access matrices, and audit reports.
What to verify
- Built-in and custom roles
- Scope and inheritance
- Separation of duties
- Role assignment and export evidence
Do not confuse it with
RBAC bases access on roles. Attribute-based control also evaluates attributes such as department, device, or context.
Procurement example
Test the lowest-privilege operational roles, not only the administrator role used during a sales demonstration.
This glossary explains procurement usage in plain English. Contract, privacy, security, accounting, and regulatory conclusions require context-specific review.