RBAC (Role-Based Access Control)
also: role-based access control
Granting permissions to roles, not individual users — a user gets access by being assigned a role, not by direct configuration.
RBAC decouples "who can do what" from individual users by introducing roles as an intermediate layer: permissions are attached to a role (e.g. "billing-admin"), and users gain those permissions by being assigned that role. This makes access auditable and manageable at organizational scale — revoke a role once instead of hunting down every permission a departing employee individually accumulated.