RBAC is an access control model where permissions are grouped into roles (like "admin"
or "viewer"
), and those roles are assigned to users or groups. Oso supports RBAC natively, allowing you to define roles, assign them to actors, and associate each role with specific permissions over resources. This model simplifies access management by decoupling user identities from specific privileges.