# RBAC

**Canonical:** https://apis.io/providers/rbac/  
**APIs profiled:** 0

Role-Based Access Control (RBAC) is a security paradigm that restricts system access based on assigned roles rather than individual user identities. Users are granted permissions through role membership, simplifying access management and ensuring the principle of least privilege. RBAC is foundational to enterprise identity, authorization, and compliance programs and is implemented across operating systems, cloud platforms, databases, and APIs. The NIST/ANSI/INCITS 359-2004 standard formally defines the RBAC model across four components: Core RBAC, Hierarchical RBAC, Static Separation of Duty, and Dynamic Separation of Duty. Cloud platforms (AWS IAM, Azure RBAC, GCP IAM) and Kubernetes all implement RBAC natively, making it the de facto authorization standard for enterprise and cloud-native environments.

## Kin Score — 14.1 / 100 (emerging)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 14.1).

| Facet | Score |
|---|---|
| Discoverability | 50.0 |
| Contract Quality | 16.9 |
| Governance | 25.0 |
| Contract Governance | 25.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 9.5 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 1.5 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | documented |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## Tags

Access Control, Authorization, Cloud-Native, Compliance, Identity Management, Kubernetes, RBAC, Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/rbac/). Scores are computed from the provider's own public artifacts under a published rubric.