Y2-P03 · Phase 3 of 8
RBAC & Access Models
Design and implement role-based access control and understand access models.
RBACABACRole miningRole catalogEntitlementsSeparation of duties
Objectives
- 1.Design a role catalog for IAM Career Lab
- 2.Map entitlements to roles
- 3.Understand separation of duties
- 4.Identify toxic combinations of access
- 5.Apply RBAC in the AD environment
Student Outcomes
- Design and document a role catalog
- Map entitlements to roles
- Identify separation of duties violations
- Apply RBAC principles in practice
Evidence Requirements
- •Role catalog document
- •Entitlement-to-role mapping
- •Separation of duties analysis
- •RBAC implementation evidence
Acceptance Criteria
- Student designs a coherent role catalog
- Student maps entitlements correctly
- Student identifies SoD violations
Evidence & Scoring
Passing: 80%
Tutor — Y2-P03
Tutor Offline. Ollama is not running. Install from ollama.com, then run
ollama serve and ollama pull llama3.1.Ask the tutor a question about your current lab.
The tutor uses progressive hints — it won't give you the answer immediately.