Role-based access provides the ability to delegate permissions among administrators in a granular fashion.

Role-based access provides the ability to delegate permissions among administrators in a granular fashion.

• A. True
• B. False
• C. It depends on the edition
• D. Not at all

Answer: (A)

Role-based access control assigns permissions to roles, and users gain those permissions by being placed in roles. This structure makes delegation possible: you can create an administrative role that includes only the specific abilities needed for a task and grant that role to another administrator. For example, you might have a role that can create and reset passwords for users in a particular department but cannot access financial data or modify security settings. By using role hierarchies and constraints, you can further tailor what each administrator can do, supporting granular delegation while preserving separation of duties. In practice, this is why the statement is correct: RBAC allows assigning narrowly defined responsibilities to different admins without giving them broad, unrestricted access.

Role-based access control assigns permissions to roles, and users gain those permissions by being placed in roles. This structure makes delegation possible: you can create an administrative role that includes only the specific abilities needed for a task and grant that role to another administrator. For example, you might have a role that can create and reset passwords for users in a particular department but cannot access financial data or modify security settings. By using role hierarchies and constraints, you can further tailor what each administrator can do, supporting granular delegation while preserving separation of duties. In practice, this is why the statement is correct: RBAC allows assigning narrowly defined responsibilities to different admins without giving them broad, unrestricted access.