Role-based access control (RBAC) in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Role-based Access Control (RBAC)?

RBAC is a method of restricting system access to authorized users based on their roles within an organization. It assigns permissions to roles rather than individuals.

beginner

Name the three main components of RBAC.

The three main components are: Roles, Permissions, and Users. Roles group permissions, and users are assigned to roles.

intermediate

How does RBAC improve security compared to assigning permissions directly to users?

RBAC simplifies management by assigning permissions to roles, reducing errors, and ensuring users only have access needed for their job, which lowers security risks.

beginner

What is the principle of least privilege in RBAC?

It means users get only the minimum permissions necessary to perform their tasks, reducing the chance of misuse or accidental damage.

beginner

Give an example of a role in RBAC and the kind of permissions it might have.

Example: A 'Manager' role might have permissions to approve requests, view reports, and manage team members, but not to change system settings.

What does RBAC primarily use to control access?

A IP addresses

B User passwords

C User roles

D Time of access

RBAC controls access by assigning permissions to roles, and users get access based on their assigned roles.

Which of the following is NOT a component of RBAC?

A Roles

B Encryption keys

C Users

D Permissions

Encryption keys are unrelated to RBAC components, which are roles, permissions, and users.

What principle does RBAC help enforce by limiting user permissions?

A Password complexity

B Maximum access

C Open access

D Least privilege

RBAC supports the principle of least privilege by giving users only the permissions they need.

In RBAC, who is assigned to roles?

A Users

B Permissions

C Servers

D Applications

Users are assigned to roles, which have specific permissions.

Why is RBAC easier to manage than assigning permissions directly to users?

A Because roles group permissions, reducing complexity

B Because users never change

C Because it uses passwords

D Because it ignores permissions

Grouping permissions into roles simplifies management and reduces errors.

Explain how Role-based Access Control (RBAC) works and why it is useful in managing system security.

Think about how assigning permissions to roles helps control user access.

Describe the principle of least privilege and how RBAC supports this principle.

Consider why users should only have the permissions they need.