Role Based Access Control user guide. (Management).

EEMA delivered the results of its Role Based Access Control (RBAC) project today in the form of an RBAC User Guide designed to act as a guide for administrators and decision-makers interested in investing in RBAC who are looking for guidance in understanding the technical concepts and business-related justification based upon real world experience. The contributors to the document are EEMA Members from vendor, user and consultancy backgrounds, working as a team to bring to the Guide a combination of market awareness and customer requirements as well as practical experience. The contributors included representatives from IBM, Critical Path, Siemens, The Royal Mail, Guardeonic, Longfield, KPMG and Nexus. Additional contributors to the RBAC project included representatives from The European Commission, NHSIA, Volvo, RSA, CGNU, Protek and Volvo. As a starting point for either a business or a technical interest in RBAC, the document introduces the key business drivers and benefits, and then explores how an RBAC de ployment fits within the broader context of an identity ecosystem.

The section on methodology describes the implementation of RBAC from the perspective of business process engineering based on an actual customer deployment, and is followed by a chapter on 'Do's and Don'ts', bringing to light elements of practical experience, both positive and negative. The Guide concludes with a look at future trends: how RBAC will fit into the rapidly evolving and merging landscape of identity and security services, and in particular how it will be impacted by the growth of Web Services and the proliferation of mobile devices.

To supplement the core document there is a series of seven appendices that provide a wealth of background and supporting material. EEMA's RBAC User's Guide is available free to EEMA Members at www.eema.org.