title: 1.4 - Why is ANSI RBAC Important? navPrev: 1.3-what-rbac-is.html navPrevText: 1.3 - What ANSI RBAC is navUp: 1-intro-rbac.html navUpText: 1 - An Introduction to Role-Based Access Control ANSI INCITS 359-2004 navNext: 1.5-how-to-impl-rbac.html navNextText: 1.5 - How to implement ANSI RBAC

1.4 - Why is ANSI RBAC Important?

  • Enforces the concept of least privilege. Granting users business functionality doesn‘t imply entitlements may be used at any time. For example a bank teller shouldn’t withdrawal money from customer accounts outside of normal business hours or freelance contractors don't require access to production resources to do their jobs.

  • Enables Regulatory Compliance. Who has been granted authority to the most important resources? How can we be certain that terminiated employees and customers no longer have access to controlled resources?

  • Enforces separation of duty policies. For example traders must not be regulators or purchasing agents cannot approve transactions.

  • Eases administration costs due to elimination of redundant resources. Enable business units to be delegated administrative tasks.