e-ISSN: Applied
editor@ijaida.com | editor.ijaida@gmail.com

Role-Based Access Control in Enterprise RAG Systems for Privacy-Preserving Information Retrieval

Abstract

The rapid growth of enterprise data across digital repositories, cloud platforms, knowledge bases, and document management systems has created significant challenges in information retrieval and knowledge management. Conventional search systems often struggle to deliver contextually relevant responses, whereas standalone Large Language Models (LLMs) can produce inaccurate or misleading outputs due to their limited access to organization-specific knowledge. Retrieval-Augmented Generation (RAG) has emerged as an effective framework that integrates information retrieval with generative artificial intelligence, enabling the generation of more accurate, reliable, and context-aware responses. Despite these advantages, enterprise environments require robust access control mechanisms to protect sensitive information. To address this challenge, this study proposes an Enterprise Retrieval-Augmented Generation (RAG) system integrated with Role-Based Access Control (RBAC), providing secure, intelligent, and role-aware knowledge retrieval within organizational environments. The proposed framework combines vector databases, embedding models, retrieval engines, large language models, and RBAC policies to provide secure, personalized, and context-aware responses. The study discusses system architecture, methodology, implementation strategies, hardware requirements, security considerations, and performance evaluation. The results indicate that integrating RBAC into RAG systems significantly enhances information security while maintaining efficient retrieval performance and high response accuracy. The proposed framework enterprise knowledge management, decision support, and secure AI-powered information access.

Keywords

Retrieval-Augmented Generation, Enterprise AI, Knowledge Management, Large Language Models, Information Retrieval, Artificial Intelligence Security, RAG, Secure Information Access, Enterprise AI, Knowledge Retrieval, Embedding Models, Generative AI, Decision Support Systems

Citation of this Article

John D Mathew. (2026). Role-Based Access Control in Enterprise RAG Systems for Privacy-Preserving Information Retrieval. International Journal of Artificial Intelligence and Data Analytics, 1(1), 1-7. DOI: https://doi.org/10.47001/IJAIDA/2026.101001

References

Lewis, P., Perez, E., Piktus, A., Petroni, F., Karpukhin, V., Goyal, N., Küttler, H., Lewis, M., Yih, W. T., Rocktäschel, T., Riedel, S., & Kiela, D. (2020). Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks. Advances in Neural Information Processing Systems, 33, 9459–9474.
Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, Ł., & Polosukhin, I. (2017). Attention Is All You Need. Advances in Neural Information Processing Systems, 30.
Devlin, J., Chang, M. W., Lee, K., & Toutanova, K. (2019). BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding. Proceedings of NAACL-HLT, 4171–4186.
Sandhu, R. S., Coyne, E. J., Feinstein, H. L., & Youman, C. E. (1996). Role-Based Access Control Models. IEEE Computer, 29(2), 38–47.
Ferraiolo, D. F., Kuhn, D. R., & Chandramouli, R. (2003). Role-Based Access Control. Artech House Publishers.
Manning, C. D., Raghavan, P., & Schütze, H. (2008). Introduction to Information Retrieval. Cambridge University Press.
Goodfellow, I., Bengio, Y., & Courville, A. (2016). Deep Learning. MIT Press.
Jurafsky, D., & Martin, J. H. (2023). Speech and Language Processing (3rd Edition Draft). Stanford University.
Karpukhin, V., Oguz, B., Min, S., Lewis, P., Wu, L., Edunov, S., Chen, D., & Yih, W. T. (2020). Dense Passage Retrieval for Open-Domain Question Answering. Proceedings of EMNLP 2020, 6769–6781.
NIST. (2020). Security and Privacy Controls for Information Systems and Organizations. NIST Special Publication 800-53, Revision 5. National Institute of Standards and Technology.
License: This article is published under the Creative Commons Attribution 4.0 International License (CC BY 4.0).