In computer systems security, role-based access control or role-based security is an approach to restricting system access to authorized users, and to implementing mandatory access control or discretionary access control.