Abstract: RBAC has many excellent characteristics, for example, it can reduce the complexity of authorization management, lower management costs, enhance system security and so on. This paper analyzes the basic principle and architecture of RBAC model. RBAC is described in the B/S model of information management system, and the new model is applied to a company's business information management system development. The association between users and roles, and roles and permissions is realized. So different users have different operating authority in this business information management system. In addition, the system’s security and management efficiency are improved.

Key words: role-based access control, B/S, management information system, privilege control