A method of restricting network access based on the designated roles of individual users within an enterprise.
Role-Based Access Control (RBAC) is an approach to restricting system access to authorized users based on their specific roles and responsibilities within an organization.
Instead of assigning permissions to individuals one by one, permissions are grouped into "roles" (e.g., "Data Scientist", "System Administrator", "Guest"). Users are then assigned to these roles, simplifying the management of security policies.
RBAC carries over to Private AI deployments: a Large Language Model should surface insights only from data the querying user is authorized to view.
In an enterprise RAG system, that means propagating RBAC down to the Vector Database level, so the model cannot retrieve or synthesize documents outside the permissions of the user's role.
See also Private AI, Large Language Model, Data Governance, Vector Database, Air-Gapped Environment and Zero Trust Architecture.