A type of authorization that uses roles to determine access rights and privileges. A role is a symbolic category of users that share the same security privilege.