CGRC · Question #703
Which of the following statements about role-based access control (RBAC) model is true? Response:
The correct answer is B. In this model, a user can access resources according to his role in the organization. Role-based access control (RBAC) models define permissions based on a user's organizational function, allowing access to resources according to their assigned roles.
Question
Which of the following statements about role-based access control (RBAC) model is true? Response:
Options
- AIn this model, the permissions are uniquely assigned to each user account.
- BIn this model, a user can access resources according to his role in the organization.
- CIn this model, the same permission is assigned to each user account.
- DIn this model, the users canaccess resources according to their seniority.
How the community answered
(47 responses)- A2% (1)
- B89% (42)
- C2% (1)
- D6% (3)
Why each option
Role-based access control (RBAC) models define permissions based on a user's organizational function, allowing access to resources according to their assigned roles.
Permissions are assigned to roles, not uniquely to each user account; users inherit permissions by being assigned to a role.
In RBAC, permissions are assigned to roles, and users are then assigned to one or more roles. This structure ensures that a user's access to resources is determined by their specific job function or responsibilities within the organization, simplifying access management.
RBAC allows for different permissions to be assigned based on various roles, meaning not every user account has the same permissions.
RBAC is based on job function and responsibility, not directly on seniority, although seniority might sometimes correlate with the roles assigned.
Concept tested: Principles of Role-Based Access Control (RBAC)
Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview
Topics
Community Discussion
No community discussion yet for this question.