NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.
Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.
An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Role Based Access Control (RBAC) refers to a class of security mechanisms that mediate access to resources through organizational identities called roles. A number of models have been published that formally describe the basic properties of RBAC. One feature of these models is the notion of a role hierarchy, which represents the relationship among roles that are defined in terms of other roles and inherit basic capabilities from them. This paper explores some interesting characteristics of role hierarchies and how they affect basic RBAC properties such as separation of duty.
Proceedings Title
Proceedings of the 21st National Information Systems Security Conference (NISSC '98)
Conference Dates
October 6-9, 1998
Conference Location
Crystal City, VA
Conference Title
21st National Information Systems Security Conference (NISSC '98)
Jansen, W.
(1998),
Inheritance Properties of Role Hierarchies, Proceedings of the 21st National Information Systems Security Conference (NISSC '98), Crystal City, VA, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=916542
(Accessed October 12, 2025)