R
Role-Based Access Control
An authorization approach that groups permissions into roles assigned to users within an access context.
Roles simplify permission management, but tenant and record scope still need explicit enforcement so a valid permission cannot cross a company boundary.