Role-Based Access Control ― a Real World Solution

摘要

A combination of Role-based access control and automated provisioning of user access permissions can provide a powerful mecha- nism for dealing with a number of previously difficult and often poorly implemented organizational prob- lems. Although implementing automated RBAC across an organization is a major undertaking, it can bring significant benefits once it is set up: simplified adminis- tration of access rights, reduced likelihood of inappropriate permissions or separation of duty conflicts; reduced organisational risk; and reduced resource costs providing a tangible ROI.