[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"glossary-role-based-access-control::en":3,"gloss-cluster-role-based-access-control::en":26,"gloss-next-role-based-access-control::en":9},{"slug":4,"category":5,"name":6,"definition":7,"meta_desc":8,"faq":9,"schema_markup":9,"related":10},"role-based-access-control","saas","Role-Based Access Control (RBAC)","Role-based access control governs what users can do in your product by assigning them roles (admin, editor, viewer) that bundle permissions, rather than granting permissions to each user one by one. It's the access model most B2B SaaS products need the moment they sell to teams: a buyer wants to invite colleagues without giving everyone the ability to delete data, change billing, or export the customer list. RBAC keeps this manageable — define roles once, assign them, and audit who can do what. For builders, the practical decision is granularity: too few roles and enterprises can't map their org; too many and the UI becomes unusable. Many products start with three or four fixed roles and later add custom roles and finer permissions as enterprise deals demand it. RBAC pairs with SSO, SCIM, and audit logs as part of the enterprise-readiness bundle, and it's a common gate for the higher-priced tier where security-conscious buyers live.","Role-based access control is the permission model B2B SaaS needs the moment it sells to teams: buyers invite colleagues without handing everyone admin rights.",null,[11,14,17,20,23],{"slug":12,"name":13},"multi-tenant","Multi-Tenant",{"slug":15,"name":16},"oauth","OAuth",{"slug":18,"name":19},"scim","SCIM (System for Cross-domain Identity Management)",{"slug":21,"name":22},"soc-2","SOC 2",{"slug":24,"name":25},"sso","Single Sign-On (SSO)",[27,31,35,38,41,44,47,51,54,57,60,63],{"slug":28,"category":5,"name":29,"updated_at":30},"activation","Activation","2026-08-24T02:46:36+00:00",{"slug":32,"category":5,"name":33,"updated_at":34},"aha-moment","Aha Moment","2026-08-24T02:46:37+00:00",{"slug":36,"category":5,"name":37,"updated_at":34},"annual-contract-value","Annual Contract Value (ACV)",{"slug":39,"category":5,"name":40,"updated_at":30},"api-first","API-First",{"slug":42,"category":5,"name":43,"updated_at":30},"arpa","Average Revenue Per Account (ARPA)",{"slug":45,"category":5,"name":46,"updated_at":30},"arr","Annual Recurring Revenue (ARR)",{"slug":48,"category":5,"name":49,"updated_at":50},"auto-renewal-clause","Auto-Renewal Clause","2026-08-24T02:46:38+00:00",{"slug":52,"category":5,"name":53,"updated_at":50},"build-vs-buy","Build vs. Buy",{"slug":55,"category":5,"name":56,"updated_at":34},"burn-multiple","Burn Multiple",{"slug":58,"category":5,"name":59,"updated_at":50},"burn-rate","Burn Rate",{"slug":61,"category":5,"name":62,"updated_at":30},"cac","Customer Acquisition Cost (CAC)",{"slug":64,"category":5,"name":65,"updated_at":30},"cdn","Content Delivery Network (CDN)"]