Many companies adopt authorization management to authorize the appropriate permission for users to operate their resources. After role-based access control (RBAC) is proposed and accepted, companies adopt a role, i.e. job position, to achieve authorizatio