ANSI/INCITS 359-2004
This standard describes RBAC features that have achieved acceptance in thecommercial marketplace. It includes a reference model and functional specificationsfor the RBAC features defined in the reference model. It is intended for (1)software engineers and product development managers who design products incorporatingaccess control features; and (2) managers and procurement officialswho seek to acquire computer security products with features that provide accesscontrol capabilities in accordance with commonly known and understoodterminology and functional specifications.