Role Engineering: Methods and Standards

E. Coyne,Timothy R. Weil,D. R. Kuhn
DOI: https://doi.org/10.1109/MITP.2011.105
2011-11-01
IT Professional
Abstract:Most of today's large firms use some form of role-based access control (RBAC) to support thousands of users and permission controls. Recognizing the need for some commonality among the various RBAC models, the National Institute of Standards and Technology proposed the NIST Model for RBAC in 2000. NIST is now working to update and enhance this standard.
What problem does this paper attempt to address?