Role-based access control

As explained in Grokking Relational Database Design

Role-based access control is an access-control model in which permissions are assigned to roles and users receive permissions through those roles.

How Grokking Relational Database Design covers it

How deep it goes

Works through role creation, permission grants, user assignment, and default-role configuration with SQL examples.

Examples

Uses high-school records and Sci-Fi Collective tables to illustrate standard-user, analyst, and admin permissions.

What it assumes

Requires no stated background; defines access control and contrasts mandatory access control before applying RBAC.

What you can do after

Apply it via SQL by creating roles, granting table permissions, assigning users, and enabling default roles.

How it connects

Connects access control with confidentiality, encryption, mandatory access control, users, roles, and database permissions.

liveBookmanning.com

Read Grokking Relational Database Design on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Secure APIsRole-based access control is an authorization model that grants permissions according to assigned user roles.
• 

  liveBookmanning.com
  Software Security for DevelopersRole-based access control is an access-control technique that grants permissions through roles, with role definitions potentially isolated for different organizational contexts.
• 

  liveBookmanning.com
  Authorization in ActionRole-based access control is an authorization model that assigns permissions to roles and grants principals those roles rather than assigning permissions directly to each principal.
• 

  liveBookmanning.com
  Acing the Certified Kubernetes Administrator Exam, Second EditionRole-based access control is an authorization model that grants permissions according to assigned roles.
• 

  liveBookmanning.com
  MongoDB 8.0 in Action, Third EditionRole-based access control (RBAC) is an authorization model that grants permissions through roles assigned to users or applications.
• 

  liveBookmanning.com
  Google Anthos in ActionRole-based access control (RBAC) is an authorization model that grants permissions according to roles assigned to users or other principals.
• 

  liveBookmanning.com
  Architecting an Apache Iceberg LakehouseRole-based access control is an authorization technique that grants permissions according to assigned user or service roles.
• 

  liveBookmanning.com
  Snowflake Data EngineeringRole-based access control is an access-control model that assigns permissions through roles associated with users or processes.
• 

  liveBookmanning.com
  Building Web APIs with ASP.NET CoreA role-based claims mechanism is an authorization approach that grants or restricts access according to roles represented in caller claims.
• 

  liveBookmanning.com
  Kubernetes for DevelopersRole-based access control is an authorization model that grants permissions according to assigned roles rather than directly to individual identities.
• 

  liveBookmanning.com
  Microsoft Azure in ActionRole-based access control is an authorization method that grants permissions according to assigned roles.
• 

  liveBookmanning.com
  Generative AI in ActionRole-based access control is an authorization method that assigns permissions to roles and grants users access through those roles.
• 

  liveBookmanning.com
  ScyllaDB in ActionRole-based access control is an authorization model in which permissions are assigned to roles and clients act through those roles.
• 

  liveBookmanning.com
  Data Pipelines with Apache Airflow, Second EditionRole-based access control is an authorization technique that grants permissions according to assigned user or group roles.
• 

  liveBookmanning.com
  Effective Platform EngineeringRole-based access control is an authorization method that grants permissions according to assigned roles.

Compare how 16 books explain role-based access control →

Related concepts

• roleuses · A role is a defined function, responsibility, perspective, or set of permissions associated with a participant in an organization or system.
• attribute-based access controlcontrasts with · Attribute-based access control is an authorization model that evaluates subject, resource, action, and contextual attributes against policies to make access decisions.
• authorizationkind of · Authorization is the determination and enforcement of rules governing which subjects may access resources or perform operations.
• authorization modelkind of · An authorization model is a formal scheme that represents authority and determines whether subjects may perform actions on resources.
• vault access policyalternative to · A vault access policy is an authorization configuration specifying which identities may perform permitted operations on secrets, keys, or certificates.
• authorization decisionkind of · An authorization decision determines whether a principal is permitted to access a resource or perform an action under applicable permissions or policy.

This explainer was generated by Manning's knowledge graph from the text of Grokking Relational Database Design. The section links point to the parts of the book it draws on.