← Dictionary
Dictionary · Dev

What is RBAC?

Role-Based Access Control

It is a method of authorizing and limiting access to users according to their roles within the system.

Overview

RBAC is a set of rules that determine who can do what in a system. For example, an 'administrator' can access all parts of the system, while a 'reader' can only see the contents. This method reduces security errors and makes it easier to keep track of who has authority over what in complex systems.

Analogy: It's like room cards in a hotel; Everyone can only enter their own room and common areas, but not another guest's room.

How it works

The system administrator first defines roles (such as administrator, editor, user). Each role is then assigned specific permissions. Finally, users are included in these roles and their authority is automatically determined.

Where it is used

It is used in enterprise software, cloud systems and database management.

Commonly confused with

It can be confused with SSO (Single Sign-On); SSO is the login method, while RBAC is your authorization after logging in.

Frequently asked questions

Why should I use RBAC?

It improves security and eliminates user management complexity.

Can I change roles later?

Yes, the system administrator can update permissions from a central point.

Related terms

Related tools

This explanation was written in plain language for TreScout and machine-translated from the Turkish original · the Turkish version prevails. If something looks wrong or missing, write to hello@trescout.com. Read in Turkish →