---
title: "Role-Based Access Control (RBAC) — Definition & Engineering Context"
description: "Role-Based Access Control (RBAC) is an authorization mechanism that restricts system access and database operations to authorized users based on their assigned organizational roles rather than individual user accounts."
canonical: https://erpstack.io/glossary/rbac
markdown_url: https://erpstack.io/glossary/rbac.md
publisher: ERPStack
---

# Role-Based Access Control (RBAC)

> **Definition:** Role-Based Access Control (RBAC) is an authorization mechanism that restricts system access and database operations to authorized users based on their assigned organizational roles rather than individual user accounts.

## In depth

RBAC simplifies access management by grouping permissions into roles (e.g., 'Warehouse Operator', 'Financial Auditor', 'Super Admin'). When a user requests an API or page resource, the system verifies their role permissions. This is critical in custom ERP architectures to protect ePHI, billing systems, and settings tables from unauthorized staff modifications.

## How ERPStack applies this

We design secure RBAC middlewares in Next.js, validating user roles against JWT claims at the edge to restrict API routes and dashboard views.

## Related reading

- [JWT Session Storage](https://erpstack.io/glossary/jwt)
- [Zero-Trust Security](https://erpstack.io/glossary/zero-trust)