Definition
The central ideal of administration model for RBAC is to use the role itself to manage roles. There are two well-known families of administration RBAC models.
Administrative RBAC
The Administrative RBAC family of models known as ARBAC97 [3] introduces administrative roles that are used to manage the regular roles. These roles can form a role hierarchy and may have constraints. ARBAC97 consists of three administrative models, the user-role assignment (URA97) model, the permission-role assignment (PRA97) model, and the role-role administration (RRA97) model. URA97 defines which administrative roles can assign which users to which regular roles by means of the relation: can_assign. Similarly, PRA97 defines which administrative roles can assign which permissions to which regular roles by means of the relation: can_assignp. Each of these relations also has a counterpart for revoking the assignment (e.g., can_revoke). RRA97 defines which administrative...
This is a preview of subscription content, log in via an institution to check access.
Recommended Reading
Crampton J, Loizou G. Administrative scope: a foundation for role-based administrative models. ACM Trans Inf Syst Secur. 2003;6(2):201–31.
Oh S, Sandhu R. A model for role administration using organization structure. In: Proceedings of the 7th ACM symposium on access control models and technologies, 2002. p. 155–62.
Sandhu R, Bhamidipati V, Munawer Q. The ARBAC97 model for role-based administration of roles. ACM Trans Inf Syst Secur. 1999;2(1):105–35.
Sandhu R, Munawer Q. The ARBAC99 model for administration of roles (1999). In: Proceedings of the 15th computer security applications conference, Arizona, 1999. p. 229.
Zhang Y, James B, Joshi D. SARBAC07: scoped administration model for RBAC with hybrid hierarchy. In: Proceedings of the 3rd international symposium on information assurance and security, 2007, p. 149–54.
Zhang Y, Joshi JBD. ARBAC07: a role based administration model for RBAC with hybrid hierarchy. In: Proceedings of the IEEE international conference information reuse and integration, 2007, p. 196–202.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Section Editor information
Rights and permissions
Copyright information
© 2014 Springer Science+Business Media New York
About this entry
Cite this entry
Zhang, Y., Joshi, J.B.D. (2014). Administration Model for RBAC. In: Liu, L., Özsu, M. (eds) Encyclopedia of Database Systems. Springer, New York, NY. https://doi.org/10.1007/978-1-4899-7993-3_1507-2
Download citation
DOI: https://doi.org/10.1007/978-1-4899-7993-3_1507-2
Received:
Accepted:
Published:
Publisher Name: Springer, New York, NY
Online ISBN: 978-1-4899-7993-3
eBook Packages: Springer Reference Computer SciencesReference Module Computer Science and Engineering