What is role-based access control (RBAC)?
Role-based access control (RBAC) is a security model that grants permissions based on a user's role, such as support agent, manager or admin, rather than assigning them one by one, so people only access what their job requires and access is easy to manage.
Example
| Role | Can do |
|---|---|
| Agent | View and reply to tickets |
| Manager | Plus reassign and see reports |
| Admin | Plus configure settings |
RBAC vs ABAC
RBAC uses roles. Attribute-based access control (ABAC) uses attributes like department, region or data sensitivity.
RBAC and AI agents
An AI agent should inherit the requesting user's permissions or a narrowly scoped role, never broad admin access.
