Role-based access control (RBAC)
Also called: RBAC
Course: AP® Cybersecurity Shows up in: Unit 5: Securing Applications and Data
An access control model that assigns every subject to a role and defines which roles have which access to which objects.
Appears in the course and exam description (CED): 5.2.C.2
Why it matters in Unit 5
Access follows the job, not the person.
Example
Only the “pharmacist” role can update medication stock.
Learn it properly, with a checkpoint 5.2 Protecting Applications and Data: Managerial Controls and Access Controls