RMP / Read / Security Framework / Authentication and Authorization / Authorization Protocols Authorization Protocols Role-Based Access: Align permissions with user roles (e.g., administrator vs. teacher). Least Privilege: Default new roles to minimal required permissions. Session Expiry: Prompt re-authentication after periods of inactivity. Previous Authentication and Authorization Next Key Management Procedures