# Role Based Access Control (`RBAC`)

__*zz-BGL*__
__*zz-Jeff*__

+ A role is a collection of privileges
+ `RBAC` consists of following operations:
  + Create a role
  + Delete a role
  + Grant a privilege to a role
  + Grant a role to user

-------------------------------------------------------------
The implementation of `TiDB`'s role-based access control (`RBAC`) system is similar to that of `MySQL 8.0`. `TiDB` is compatible with most `RBAC` syntax of `MySQL`.

A role is a collection of a series of privileges. You can do the following operations:
- Create a role.
- Delete a role.
- Grant a privilege to a role.
- Grant a role to user. That user can obtain the privileges involved in the role, after enabling the role.