Role-Based Access Control (RBAC) is everywhere, but most implementations rot over time. Roles pile up. Permissions overlap. Nobody knows who can do what. Lean RBAC cuts the system down to only what’s needed. It’s the RBAC you can read in one breath and audit in one glance.
Lean RBAC applies Minimum Viable Roles. Each role is tied directly to a business function. No catch-all admin roles. No “temporary” access that lingers for years. Every permission is explicit and documented.
The structure is flat. One person, one role, one set of permissions. If someone changes jobs, you change their role. No hidden grants. No silent privilege creep.
Lean RBAC uses centralized permission definitions. This means permissions live in code or config—not scattered in databases or hidden in service settings. The control layer is predictable and versioned. Changes are reviewed like any other code.
Auditing is built in. You can see all roles and permissions in one table. Every change is tracked. This transparency stops security drift and enforces compliance without extra tooling.