What is RBAC (Role-Based Access Control)?

Definition: RBAC (Role-Based Access Control) is a security model where permissions are assigned to roles, and users get access through the roles they hold.

Example roles in an iGaming back office:

• Support agent - views player profiles and history, cannot change balances.
• Risk analyst - sets limits and reviews flagged accounts.
• Finance - approves payouts and views financial reports.
• Administrator - manages users and roles.

Key principles:

• Least privilege - each role gets only the access its tasks require.
• Separation of duties - sensitive actions need more than one role, e.g. creating and approving a balance adjustment.
• Regular access reviews and removal of unused accounts.

Why it matters: RBAC protects player data and funds, and every action is linked to a named user in the audit trail.