Which model assigns user roles based on defined criteria?

Which model assigns user roles based on defined criteria?

• A. Rule Based Access Control (RBAC)
• B. Domain Type Enforcement (DTE)
• C. Data Backups
• D. Environmental Factors

Answer: (A)

Role-based access control assigns access by mapping users to defined roles that reflect their job function or responsibilities. In this model you first create roles (for example, administrator, manager, or end user) and attach the appropriate permissions to each role. Users are then granted one or more roles based on criteria such as their function, department, or authority level. Because access is granted through roles rather than individually, permissions are easier to manage at scale, changes cascade when a role is updated, and you can enforce least privilege and separation of duties more consistently. The other options describe different concepts that don’t base access on defined roles tied to job function or duties.

Role-based access control assigns access by mapping users to defined roles that reflect their job function or responsibilities. In this model you first create roles (for example, administrator, manager, or end user) and attach the appropriate permissions to each role. Users are then granted one or more roles based on criteria such as their function, department, or authority level. Because access is granted through roles rather than individually, permissions are easier to manage at scale, changes cascade when a role is updated, and you can enforce least privilege and separation of duties more consistently. The other options describe different concepts that don’t base access on defined roles tied to job function or duties.