An access-control method that assigns system capabilities according to a user’s job role, such as operator, engineer, or administrator. It simplifies administration and ensures users receive only the functions needed for their responsibilities.