Role-based access control, or RBAC, grants permissions by role rather than person: workplace admins configure sites, team leads see their team’s attendance, employees book for themselves. When someone changes jobs, changing their role changes their access, with no per-person permission archaeology.
In workplace platforms RBAC is what keeps attendance and HR-adjacent data on a need-to-know basis while still letting everyone book a desk. Paired with single sign-on and SCIM provisioning, the whole lifecycle is automatic: joiners get the right role from day one and leavers lose access the moment HR says so.