Design role-based access control (RBAC) model