What does RBAC stand for, and how is it applied to deployment tooling?

• A. Allow all users to deploy.
• B. Limit who can deploy and approve changes.
• C. Encrypt deployment artifacts.
• D. Track deployment metrics.

Answer: (B)

RBAC stands for Role-Based Access Control, a way to manage permissions by assigning them to roles rather than to individuals. In deployment tooling, this means defining roles such as developer, tester, and release manager, each with a specific set of allowed actions. A developer might be able to push changes to a development environment but not trigger production deployments or approve changes, while a release manager would have the authority to review and approve deployments to production. This setup enforces least privilege and separation of duties, and it provides clear audit trails of who deployed what and when.

So the key idea is that RBAC restricts who can deploy and who can approve changes, based on their role. It’s not about encrypting artifacts or tracking deployment metrics.