In this section, we introduce constraints in role-based access control. We consider three types of role-based constraints. They are cardinality, prerequisite, and mutual exclusion constraints. These constraints have been considered in the existing literature