{"id":"https://openalex.org/W1997862012","doi":"https://doi.org/10.1145/300830.300839","title":"The ARBAC97 model for role-based administration of roles","display_name":"The ARBAC97 model for role-based administration of roles","publication_year":1999,"publication_date":"1999-02-01","ids":{"openalex":"https://openalex.org/W1997862012","doi":"https://doi.org/10.1145/300830.300839","mag":"1997862012"},"language":"en","primary_location":{"id":"doi:10.1145/300830.300839","doi":"https://doi.org/10.1145/300830.300839","is_oa":true,"landing_page_url":"https://doi.org/10.1145/300830.300839","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/300830.300839","source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-140"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/300830.300839","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038692973","display_name":"Ravi S. Sandhu","orcid":"https://orcid.org/0000-0002-3165-1813","observed_orcids":["https://orcid.org/0000-0002-3165-1813","https://orcid.org/0000-0001-8423-8291"]},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ravi Sandhu","raw_affiliation_strings":["George Mason Univ., Fairfax, VA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason Univ., Fairfax, VA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046637110","display_name":"Venkata Bhamidipati","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Venkata Bhamidipati","raw_affiliation_strings":["George Mason Univ., Fairfax, VA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason Univ., Fairfax, VA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073401422","display_name":"Qamar Munawer","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qamar Munawer","raw_affiliation_strings":["George Mason Univ., Fairfax, VA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason Univ., Fairfax, VA","institution_ids":["https://openalex.org/I162714631"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I162714631"],"apc_list":null,"apc_paid":null,"fwci":66.6638,"has_fulltext":true,"cited_by_count":605,"citation_normalized_percentile":{"value":0.99881237,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"2","issue":"1","first_page":"105","last_page":"135"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":1.0,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":1.0,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"role-based access control","score":0.9789999723434448},{"id":"https://openalex.org/keywords/user-role-assignment","display_name":"user-role assignment","score":0.8949999809265137},{"id":"https://openalex.org/keywords/authorization-management","display_name":"authorization management","score":0.8410000205039978},{"id":"https://openalex.org/keywords/scalability","display_name":"scalability","score":0.4090000092983246}],"concepts":[{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.9563453197479248},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.8006277680397034},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7844083905220032},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.7348933219909668},{"id":"https://openalex.org/C132010649","wikidata":"https://www.wikidata.org/wiki/Q189222","display_name":"Intuition","level":2,"score":0.7082005739212036},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5850023031234741},{"id":"https://openalex.org/C2780765947","wikidata":"https://www.wikidata.org/wiki/Q12033531","display_name":"Administration (probate law)","level":2,"score":0.534302830696106},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5183880925178528},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5114868879318237},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2588781714439392},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0863209068775177},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.06068086624145508},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/300830.300839","doi":"https://doi.org/10.1145/300830.300839","is_oa":true,"landing_page_url":"https://doi.org/10.1145/300830.300839","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/300830.300839","source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-140"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/300830.300839","doi":"https://doi.org/10.1145/300830.300839","is_oa":true,"landing_page_url":"https://doi.org/10.1145/300830.300839","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/300830.300839","source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-140"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"display_name":"Peace, justice, and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309029","display_name":"George Mason University","ror":"https://ror.org/02jqj7156"},{"id":"https://openalex.org/F4320311089","display_name":"National Security Agency","ror":"https://ror.org/0047bvr32"},{"id":"https://openalex.org/F4320332178","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1997862012.pdf","grobid_xml":"https://content.openalex.org/works/W1997862012.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W163122937","https://openalex.org/W1542556897","https://openalex.org/W1543439672","https://openalex.org/W1543740779","https://openalex.org/W1559018605","https://openalex.org/W1559514285","https://openalex.org/W2012849092","https://openalex.org/W2038953226","https://openalex.org/W2044217305","https://openalex.org/W2053741629","https://openalex.org/W2059501610","https://openalex.org/W2060690494","https://openalex.org/W2081186654","https://openalex.org/W2082497816","https://openalex.org/W2092064278","https://openalex.org/W2102577841","https://openalex.org/W2111753337","https://openalex.org/W2119427861","https://openalex.org/W2145643698","https://openalex.org/W2166602595","https://openalex.org/W4237164190","https://openalex.org/W6675446150","https://openalex.org/W6676716509"],"related_works":["https://openalex.org/W2374393728","https://openalex.org/W2379813727","https://openalex.org/W2124367090","https://openalex.org/W2555738791","https://openalex.org/W1990260561","https://openalex.org/W2095975812","https://openalex.org/W2357728851","https://openalex.org/W1593822213","https://openalex.org/W2367441718","https://openalex.org/W2355345331"],"abstract_inverted_index":{"In":[0],"role-based":[1,68],"access":[2],"control":[3],"(RBAC),":[4],"permissions":[5],"are":[6,12],"associated":[7],"with":[8,99],"roles'":[9],"and":[10,46,54,62,81,93,107],"users":[11],"made":[13],"members":[14],"of":[15,28,65,102,110,145],"roles,":[16],"thereby":[17],"acquiring":[18],"the":[19,59,117,121,137],"roles;":[20],"permissions.":[21],"RBAC's":[22],"motivation":[23],"is":[24,33,75,130],"to":[25,34,38,41,120],"simplify":[26],"administration":[27],"authorizations.":[29],"An":[30],"appealing":[31],"possibility":[32],"use":[35],"RBAC":[36,71,79,103],"itself":[37],"manage":[39],"RBAC,":[40],"further":[42],"provide":[43],"administrative":[44,51],"convenience":[45],"scalability,":[47],"especially":[48],"in":[49,114,127,133],"decentralizing":[50],"authority,":[52],"responsibility,":[53],"chores.":[55],"This":[56,73],"paper":[57,135],"describes":[58],"motivation,":[60],"intuition,":[61],"formal":[63],"definition":[64],"a":[66],"new":[67],"model":[69,74],"for":[70,136],"administration.":[72,104],"called":[76],"ARBAC97":[77,129],"(administrative":[78],"'97)":[80,97],"has":[82],"three":[83],"components:":[84],"URA97":[85],"(user-role":[86],"assignment":[87,91,96],"'97),":[88,92],"RPA97":[89],"(permission-role":[90],"RRA97":[94,111,124],"(role-role":[95],"dealing":[98],"different":[100],"aspects":[101],"URA97,":[105],"PRA97,":[106],"an":[108],"outline":[109],"were":[112],"defined":[113],"1997,":[115],"hence":[116],"designation":[118],"given":[119],"entire":[122],"model.":[123],"was":[125],"completed":[126],"1998.":[128],"described":[131],"completely":[132],"this":[134],"first":[138],"time.":[139],"We":[140],"also":[141],"discusses":[142],"possible":[143],"extensions":[144],"ARBAC97.":[146]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":13},{"year":2021,"cited_by_count":14},{"year":2020,"cited_by_count":15},{"year":2019,"cited_by_count":12},{"year":2018,"cited_by_count":17},{"year":2017,"cited_by_count":9},{"year":2016,"cited_by_count":19},{"year":2015,"cited_by_count":25},{"year":2014,"cited_by_count":31},{"year":2013,"cited_by_count":29},{"year":2012,"cited_by_count":27}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-10T00:00:00"}