Question

Design the RBAC model for an enterprise IT/HR platform where 200K employees across a deep org hierarchy need access scoped by department, location, and job function, managers can delegate a subset of their permissions to reports, and auditors must answer 'who can approve a $1M purchase order and why?' The naive 'one role per unique permission set' approach explodes into tens of thousands of roles. Walk through the model, how you avoid role explosion, how delegation works without privilege escalation, and how you make access auditable.