From the course: CompTIA SecurityX (CAS-005) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Access control models

Access control models

- Okay, in this lesson we're going to cover some concepts that you've certainly learned as a Security+, but we're going to build on a couple of things here. We're going to start out with our access models looking at the very popular role-based access control, otherwise known as RBAC. So, RBAC is a security framework that restricts system access based on predefined roles or your job titles or what you are in the organizational chart of the enterprise. So instead of assigning permissions to individual users, RBAC assigns them to roles, and then the users inherit those roles, and that's how they get their permissions and their rights. This structured approach simplifies access management, it enhances security, and it ensures compliance with organizational policies. So RBAC is good for department-specific access. So for example, in an auditing and accounting firm where auditors maybe have read-only access. Then you can have maybe secure application environments, like healthcare, where you…

Contents