# Role-based access control

Concept · [Cloud, hosting and security](https://ecosystem.samcarlton.com/cloud)

Also called: RBAC, role-based access, roles and permissions, user roles

A way of managing access where [permissions](https://ecosystem.samcarlton.com/access-control) are given to roles, such as admin, editor or viewer, and each person is assigned a role.

**For example:** A new [employee](https://ecosystem.samcarlton.com/contractor-vs-employee) is given the 'billing' role and instantly gets access to invoices but not to engineering settings.

## Connects to (4)

- [Access control](https://ecosystem.samcarlton.com/access-control): Rules about who can see or change what in a system.
- [Authentication](https://ecosystem.samcarlton.com/authentication): Checking that a person is who they say they are, usually with a login.
- [SSO](https://ecosystem.samcarlton.com/sso): Single sign-on.
- [Multi-tenancy](https://ecosystem.samcarlton.com/multi-tenancy): One copy of a software system serving many customer organizations at once, with each one's data kept separate.

Map view: https://ecosystem.samcarlton.com/role-based-access-control