IAM provides the tools for provisioning, onboarding and offboarding user access. Role-Based Access Control (RBAC) restricts system access based on the role of the user.