Role-Based Access Control
A method of restricting network access based on the designated roles of individual users within an enterprise.
Role-Based Access Control (RBAC) is an approach to restricting system access to authorized users based on their specific roles and responsibilities within an organization.
Instead of assigning permissions to individuals one by one, permissions are grouped into "roles" (e.g., "Data Scientist", "System Administrator", "Guest"). Users are then assigned to these roles, simplifying the management of security policies.
In a Private AI deployment, RBAC is crucial. It ensures that a Large Language Model only surfaces insights derived from data that the specific querying user is explicitly authorized to view, maintaining strict data governance.
In an enterprise RAG system, RBAC must be propagated down to the Vector Database level, so a Large Language Model can never retrieve or synthesize documents the querying user's role is not authorized to view.