A policy-neutral access-control mechanism defined around roles and privileges. The components of RBAC such as role-permissions, user-role and role-relationships make it simple to perform user assignments.