RBAC is giving access to the users access based to thier role at an organization.
A basic user role with read only, a manager role with read, write, and maybe update (depending on office needs), and an sysadmin role with full crud access.
I would create starter roles and have an organization begin using them and modify the roles as needed.
Authorization is what you are allowed to access.
Role assignment, Role authorization, and Permission authorization.
RBAC is a an approach taken by developers in order to restrict access to certain parts or functionality of an application to a specific group of people or roles.
Rights are associated with the roles, and roles are associated with users.
Atuhenticates.
Access is based on job functions or roles so it makes it easier grant and remove permissions on a greater scope than trying to change individual users.