Role based access control is an access control policy which is based upon defining and assigning roles to users and then granting corresponding privileges to them.
Disadvantages:
Following are the disadvantages of RBAC (Role based access model):
If you want to create a complex role system for big enterprise then it will be challenging as there will be thousands of employees with very few roles which can cause role explosion.
Using RBAC, some restrictions can be made to access certain actions of system but you cannot restrict access of certain data.
The permissions and privileges can be assigned to user roles but not to operations and objects.
