As the name suggests, role-based access control ties access privileges to the function or functions that an employee serves within an organization. For example, developers may have certain permissions within a content management system that administrators would not need access to.  This falls into least-privileged access in that the administrators are receiving as few permissions to an application as possible, where their counterparts may need slightly more to perform a more granular task.