Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Role Based Access Control RBAC

RBAC Case Studies

The following RBAC case studies and experience reports may be useful in planning for RBAC implementations. We will add to this collection as more reports become available. (Please note that the authors and organizations below are not affiliated with NIST or any other agency of the US Government, unless otherwise noted, and NIST cannot endorse or comment on these publications.)

Submit comments or suggestions on this collection to the Project Contacts.

Health Care


RBAC Inquiries

David Ferraiolo

Rick Kuhn
(301) 975-3337

Ramaswamy Mouli Chandramouli


Security and Privacy: access control

Created November 21, 2016, Updated June 22, 2020