Role-Based Access Control assigns permissions through roles.

Example roles may include admin, editor, and viewer.

RBAC is simple and useful when permissions map cleanly to organizational roles. However, real applications often require more context than a role can express.

For example, an editor may edit documents only inside their own organization. A global role check cannot express that relationship by itself.