RBAC
Technology & Computing abbreviation · Cybersecurity
| Stands for | Role-based access control |
|---|---|
| Categories | Technology & Computing |
RBAC stands for Role-based access control, a cybersecurity abbreviation.
An access model that grants permissions to roles, such as "editor" or "billing admin", and assigns users to roles, rather than giving rights to each user individually. Kubernetes, cloud platforms, databases and most business software use RBAC.
Example: Create an RBAC role that can view pods but not delete them, and bind it to the support group.
Usage notes
Formalized by David Ferraiolo and Richard Kuhn at NIST in 1992 and standardized as ANSI INCITS 359 in 2004. RBAC simplifies administration and audits, but large organizations can suffer "role explosion", with thousands of overlapping roles. Attribute-based access control adds finer-grained rules.
Related abbreviations
More cybersecurity abbreviations
- PII – Personally identifiable information
- PKI – Public key infrastructure
- PUP – Potentially unwanted program
- RaaS – Ransomware as a service
- RADIUS – Remote Authentication Dial-In User Service
- RAT – Remote access trojan
- RCE – Remote code execution
- RSA – Rivest-Shamir-Adleman
- SAML – Security Assertion Markup Language
- SASE – Secure access service edge
- SAST – Static application security testing
- SBOM – Software bill of materials