Role-based Access Control (RBAC)

Role-based access control (RBAC) is a security model that grants permissions to roles rather than to individuals, so users and agents receive access based on the role they hold.

Assigning permissions by role simplifies administration and enforces least privilege, since access is granted in coherent bundles tied to job function.

For AI agents, RBAC bounds what an agent may read or do, limiting the blast radius if it misbehaves or its credentials leak.