What is a primary advantage of Role-Based Access Control (RBAC) over Discretionary Access Control (DAC)?

What is a primary advantage of Role-Based Access Control (RBAC) over Discretionary Access Control (DAC)?

• A. It simplifies permission management by grouping permissions into roles
• B. It enforces per-user permission assignment
• C. It eliminates the need for authentication
• D. It makes all users have the same permissions

Answer: (A)

RBAC assigns permissions to roles instead of to individual users. This means you define a role with a set of permissions and then grant that role to users who need those capabilities. When staffing changes occur, you adjust by reassigning roles rather than editing permissions for many users, which keeps administration straightforward and scalable. This contrasts with DAC, where access is controlled owner-by-owner on a per-user basis, which can become unwieldy as the user base grows. Authentication is still required to identify users, and RBAC does not make everyone share the same permissions since different roles can grant different access. So the primary advantage is the simplification of permission management by grouping permissions into roles.

RBAC assigns permissions to roles instead of to individual users. This means you define a role with a set of permissions and then grant that role to users who need those capabilities. When staffing changes occur, you adjust by reassigning roles rather than editing permissions for many users, which keeps administration straightforward and scalable. This contrasts with DAC, where access is controlled owner-by-owner on a per-user basis, which can become unwieldy as the user base grows. Authentication is still required to identify users, and RBAC does not make everyone share the same permissions since different roles can grant different access. So the primary advantage is the simplification of permission management by grouping permissions into roles.