RBAC Role-Based Access Control
Permission model: users have roles (admin, editor, viewer), roles have permissions.
Scalable — change a role and 100 users update. AWS IAM, Kubernetes, GitHub teams use RBAC. More flexible alternative: ABAC (attribute-based).