When roles, when rules?
Both, rule-based identity management and role-based identity management, have their advantages and disadvantages. Thus, the mapping of the organization in the RBAC system is complex and the advantage of the omitted programming work only comes to bear from a certain complexity of the company.
Therefore it often makes sense to start with a rule-based Identity Management and to extend it later to a role-based IDM.
