Group Based Access Control, or GBAC, is a form of authorization based on groups defined for a user. GBAC allows access at scale, because assigning a new member to a group gives them the permissions of the group. Although similar to RBAC in that they both allow access at scale, GBAC is more focused on group identity than permissions.