Role based access control is an access control policy which is based upon defining and assigning roles to users and then granting corresponding privileges to them.

**Disadvantages:**

Following are the disadvantages of RBAC (Role based access model):

1-	If you want to create a complex role system for big enterprise then it will be challenging as there will be thousands of employees with very few roles which can cause role explosion.

2-	Using RBAC, some restrictions can be made to access certain actions of system but you cannot restrict access of certain data.

3-	The permissions and privileges can be assigned to user roles but not to operations and objects.