peer review and evaluate post - The paper Role-Based Access Control Models by Sandhu is still very important today because it provides a smart and organized way to manage who can access what in a system. Instead of setting up permissions for each person, you assign them to roles like "Employee" or "Supervisor," and the system gives access based on that role. This helps reduce mistakes and makes managing user access easier. It has over 11,000 citations on Google Scholar because it introduced a model that many systems, companies, and researchers still use. The paper set the foundation for how access control is handled in modern security systems. 2. Can this model be applied in a Windows Active Directory model? Explain. The RBAC model works in Windows Active Directory. For example, in a hospital using Active Directory, users can be grouped into roles like "Doctors," "Nurses," and "Administrative Staff." Each group is given different access rights. Doctors might access patient records, nurses might access treatment plans, and admin staff might only access scheduling tools. This setup matches the RBAC idea because access is given based on a person's role, not their name. It makes managing security simpler and safer, especially when people change jobs or departments