Skip to main content

Glossary term

What is Role-Based Access Control (RBAC)?

Definition

RBAC restricts system access and permissions based on roles such as admin, editor, or reviewer. In PIM, it ensures data security, workflow governance, and controlled updates across teams. This prevents unauthorised edits and maintains data integrity.

RBAC grants permissions through defined roles and should follow least-privilege principles. For example, an autonomous product data operation could take a supplier submitting a change to product content, check the submitter's role against edit and approval permissions, and route restricted changes to an authorized reviewer.

Role-Based Access Control (RBAC) in an autonomous operation

  1. Step 1:

    Input

    A supplier submitting a change to product content

  2. Step 2:

    Role-Based Access Control (RBAC)

    Check the submitter's role against edit and approval permissions

  3. Step 3:

    Outcome

    Route restricted changes to an authorized reviewer

RBAC grants permissions through defined roles and should follow least-privilege principles.

Related terms