CMGT 430 Week 2 DQ 1

CMGT 430 Week 2 DQ 1

Post a 200-300-word response to the following discussion topic. Any included references should be formatted according to APA style.

Why should an organization consider implementing role-based access control (RBAC) over discretionary access controls (DAC) or mandatory access controls (MAC)? Provide an example to put in context the differences between the three approaches?

Sample Answer 

Access Control in general is the capability to enable or restrict a computer resource in some way, usually through physical or system-based controls. Access Control can be broken into three broad types, which include Role-Based (RBAC), Discretionary (DAC)and Mandatory (MAC).

Role-Based Access Control (RBAC):

Role-Based Access Control (RBAC) refers to an access control style in which system access is restricted to users by setting up roles for various job functions and then assigning personnel to those specific roles. By utilizing the RBAC model, a user can be placed into a specific role based on their skills, abilities,and responsibilities within the organization. Role relationships can be created………………………………………………………………………………………………………………………………….