Role-based access control
In computer security, role-based access control, or RBAC, is an approach to managing user permissions. It can implement either mandatory access control (MAC) or discretionary access control (DAC).
On this page
Source content checked . English translation published 2026-10-27.
In business automation
Role-based access control assigns permissions by role instead of individually for each person. In automation, it determines who can run a workflow, view a log, or approve a payment.
Examples
These examples illustrate a possible workflow. Adapt the connections and rules to your own systems.
Separating the operator from the approver
An operator can run a test process. Only the finance role can approve a payment transfer to the destination. When an employee changes, their role is removed without rewriting all the workflows.
Relevant tools
- Supabase
- You can define role-based policies for tables; also check the keys used by the automation itself.
What to check
- A role made too broad for convenience effectively gives users excessive permissions.