An action controlled by a user’s assigned role, such as viewing data, approving changes, or modifying settings. Role-based controls enforce segregation of duties and limit critical actions to authorized personnel.