Concept - RBAC Reference Models
| Model | Adds | Slide |
|---|---|---|
| RBAC0 (base) | minimum functionality | s.24 |
| RBAC1 | RBAC0 + role hierarchies (one role inherits permissions from another) | s.24, 26 |
| RBAC2 | RBAC0 + constraints (restrict how the components may be configured) | s.24, 27 |
| RBAC3 (consolidated) | RBAC0 + both RBAC1 and RBAC2 | s.23-24 |
RBAC0 entities (s.25)
- User: an individual with access to the system and an associated user ID.
- Role: a named job function within the organization, with a description of authority and responsibility.
- Permission: approval of a particular mode of access to one or more objects; equivalent terms: access right, privilege, authorization.
- Session: a mapping between a user and an activated subset of the set of roles to which the user is assigned.
Figure s.23: lattice with RBAC3 on top, RBAC1 and RBAC2 in the middle, RBAC0 at the bottom; second diagram has U, R, P sets with user assignment, permission assignment, role hierarchy, sessions and constraints.
Related: Concept - Role Hierarchy, Concept - RBAC Constraints, Concept - Role-Based Access Control. Appears in 04 Access Control - Chunk 01 (s.1-28).