Role-Based Access Control

Correct Answer: Create a new role for the project and assign necessary permissions, adding relevant users from both departments to this role.

Creating a new role for the project and assigning necessary permissions streamlines access management by grouping users with similar access needs. Manually adding permissions or copying roles increases the complexity and risk of error. Assigning users to a single department role or using rule-based access control are not optimal solutions. Temporary administrator accounts pose a security risk.

Correct Answer: Create a temporary role with the required permissions and assign it to the team.

Creating a temporary role with the required permissions and assigning it to the team is the most effective and secure way to manage temporary access needs. It maintains the principles of RBAC and is easily trackable and auditable.

Correct Answer: Revoke the previous role and assign the new role.

When an employee changes roles, it's important to revoke the previous role and assign the new role to reflect their changing responsibilities. This ensures least privilege and prevents a user from accumulating unnecessary permissions.