RBAC

RBAC assigns permissions to roles rather than individuals, and users inherit permissions by role membership. It simplifies entitlement management and supports least-privilege at scale.