In a role-based access control model, which term describes giving a user the permissions associated with a role?

In a role-based access control model, which term describes giving a user the permissions associated with a role?

• A. Entitlement Creation
• B. Entitlement Assignment
• C. Entitlement Life Cycle
• D. Identity Repositories

Answer: (B)

In RBAC, roles bundle a set of permissions, and giving a user the permissions tied to a role is called entitlements assignment. This is the act of linking the role’s access rights to the user’s identity so they can perform the actions the role authorizes. Creating entitlements would be defining new permissions themselves, not assigning them to a user. The entitlement life cycle is about how those permissions are managed over time (provisioning, updating, revoking), not the initial grant. Identity repositories are just stores for identities and related data, not the process of granting access. For example, placing a user into the Finance Analyst role assigns the role’s permissions to that user—the assignment of those entitlements.

In RBAC, roles bundle a set of permissions, and giving a user the permissions tied to a role is called entitlements assignment. This is the act of linking the role’s access rights to the user’s identity so they can perform the actions the role authorizes. Creating entitlements would be defining new permissions themselves, not assigning them to a user. The entitlement life cycle is about how those permissions are managed over time (provisioning, updating, revoking), not the initial grant. Identity repositories are just stores for identities and related data, not the process of granting access. For example, placing a user into the Finance Analyst role assigns the role’s permissions to that user—the assignment of those entitlements.