Role-based authorization, or role-based access control (RBAC), is an authorization model which grants access to users based on their role. This is achieved by grouping permissions into roles, like "User" or "Admin," and assigning those roles to users.
