The approach is called role-based access control (RBAC). According to a National Institute of Standards and Technology (NIST) document , the first formal RBAC modelwas proposed in 1992.

Traditionally, organizations relied on role-based access control (RBAC) to secure access to resources. An account would have a designated role, and that role would have permission to access resources.