In a large company, a system administrator needs to assign users access to files using Role Based Access Control (RBAC). Which option Is an example of RBAC?

RBAC works by assigning users to roles or groups, then granting permissions to those roles rather than to individuals. When a user belongs to a group (e.g., 'HR' or 'Finance'), they inherit all permissions assigned to that role, making group membership the core mechanism of RBAC. This allows administrators to manage access at scale by modifying role permissions rather than updating each user individually.

Granting access based on individual username is Discretionary Access Control (DAC), not RBAC, because it ties permissions directly to an individual identity rather than to a role or group.

Allowing access based on the user's location at the time of access describes context-aware or attribute-based access control (ABAC), which uses environmental conditions as criteria rather than predefined roles.

Granting access based on file type is a content or attribute-based rule, not RBAC, because it focuses on the characteristics of the resource rather than the role or group membership of the user requesting access.