spacer
Logo

Home Home | Sitemap Sitemap | Contact

Contact

 
spacer  
PERI has been awarded as
one of the Nation's "10 Fastest Growing Asian American Businesses" by
the US Pan Asian American Chamber of Commerce Education Foundation
Banner
shadow
SPACER
CASE STUDIES
dots
dots
dots
dots
dots
dots
dots
dots
dots
dots
dots
SPACER
Case Studies Home < Case Studies < Role Based Access Control
dots dots
Online Training and Content Provider
Download PDF Click to print this page Mail
Role engineering is the process of defining roles and related information such as permissions, constraints and role hierarchies, as they pertain to the user's functional use of systems, applications and business processes. Access to resources (online and hardware) is primarily business-driven and roles are defined based on the responsibilities of a given job function. Roles are defined by reviewing organizational business and job functions and mapping the permissions for each job function. This approach provides business oversight and alignment of roles with business functions and re-usability. Customer's requirement was to define, design, build and deploy Role Based Access Control (RBAC) to the facilities, applications and hardware that are both time and location bound.
Solution
dots

As part of the initial system analysis study, PERI met with the business group and management authorities to define the roles and provide an Entitlements Role Based Map - Role to Resource Mapping. Based on the client needs, PERI assisted in building and implementing RBAC solution to ensure proper identity and access management and completed the following tasks.

  • Define scope and boundaries
  • Identify access policies to determine entitlements for any given job responsibility
  • Group user access based on privileges corresponding to the job functions
  • Ensure that the system has no mutually exclusive roles assigned to the same person
  • Create role hierarchies to help simplify role definitions by grouping multiple roles
  • Integrate roles into existing IdM solutions deployed by the client
Rolebased Access Control
Role-Based Access Control
Role-based access control (RBAC) will be used for managing entitlements. RBAC simplifies entitlement management by using roles (as opposed to users) as authorization subjects. Integrating RBAC as an integral part of any Identity and Access Management (IAM) initiative is the key to ensure success in RBAC deployments. RBAC also reduces the risks of users having inappropriate access privileges and aggregating entitlements as they change job functions.
 
Share |
spacer