role based access control simple

A flat or simple role-based access control (RBAC) embodies which of the following principles?