A security paradigm assigning platform permissions to defined organizational roles rather than individual users.
Role-Based Access Control (RBAC) restricts system access based on the authorized roles assigned to users within an enterprise. Roles mirror operational job functions, such as Administrator, Dispatcher, Driver, Finance Manager, or Viewer.
Governs menu navigation, button visibility, and API endpoint authorization in the commercial platform and Command Centre.
Role matrix: User -> MemberOf(Company) -> HasRole(ROLE_ADMIN, ROLE_DISPATCHER, ROLE_DRIVER, ROLE_FINANCE). Evaluated via JWT tokens and middleware guards.
RBAC controls static role permissions, but is augmented by CBAC to enforce dynamic context checks during active freight transit.