Enterprise RBAC

Purpose

Design role-based access control for enterprise organizations with complex hierarchies, multi-level subsidiaries, compliance-driven separation of duties, and flexible admin delegation. RBAC reduces audit complexity and makes permission reasoning predictable.

Agent Protocol

Trigger

Exact user phrases: "RBAC", "role-based access control", "role hierarchy", "enterprise RBAC", "separation of duties", "SoD", "role engineering", "admin role", "super admin", "master admin", "break glass", "JIT access", "permission delegation", "subsidiary permissions", "multi-org roles", "NIST RBAC", "role inheritance", "mutually exclusive roles", "access certification".

Input Context

• Organization structure: parent company, subsidiaries, departments, teams.
• Number of distinct roles (current and projected).
• Compliance frameworks (SOC 2, SOX, HIPAA, PCI DSS, GDPR).
• Existing role structure (if any) and pain points.
• Identity provider and directory service.

Output Artifact

RBAC architecture document: role hierarchy tree, permission inheritance model, SoD matrix, admin role definitions, elevation workflows, delegation policies.