What is role-based access control (RBAC)?
RBAC stands for role-based access control. Permissions are attached to roles, such as admin, editor, or viewer, and people get access by being assigned a role. This is easier to manage and audit than granting permissions to each person one at a time.
What the buyer is really asking
This question can mean roles for your own staff or roles the buyer's users get inside your product. Answer the one they mean. If you answer both, say so.
Other ways buyers ask it
Every one of these wants the same answer:
- “Do you use role-based access control?”
- “Does the application support custom roles and permissions?”
- “How are user roles defined and assigned?”
Evidence to have ready
- Role definitions for internal systems
- Product documentation for in-app roles
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.