Compared to access control based on individual accounts, RBAC is ________.

• A. less prone to error
• B. more expensive
• C. Both A and B
• D. Neither A nor B

Answer: (A)

RBAC reduces the chance of mistakes by centralizing permission management into roles rather than granting rights to each user individually. When access is assigned per person, administrators must track who has which rights as people move between teams or leave the organization, which often leads to errors like forgotten revocations or accumulated privileges. With RBAC, you define a set of permissions for a role and assign users to that role; changing a single user's access becomes a matter of adjusting their role membership or the role’s permissions, which is easier to audit and far less error-prone. There can be some upfront setup and ongoing role maintenance, but the ongoing error rate tends to drop. Hence, RBAC is less prone to error compared to per-user access control.