What is role-based access control (RBAC)?

Permissions follow the role — technician, planner, manager — not the individual.

RBAC assigns permissions to roles rather than people: a technician sees and closes their work orders, a planner schedules and assigns, a manager approves spend and sees reports. People join a role; the role defines what they can touch.

It keeps sensitive actions — approvals, pricing, configuration — behind the right roles, and makes onboarding sane: assign the role, get its access, change role and access follows.

• How it's used