Access control method where permissions are assigned to roles, and users are assigned to roles rather than receiving individual permissions.
Category: authorization. Part of the Identity Technologist Glossary — more than 200 practitioner-grade definitions covering identity verification, KYC/AML, biometrics, fraud prevention, and compliance. See all terms at https://identitytechnologist.com/glossary.