This paper introduces Role-Based Access Control( RBAC) model, and presents an improved model based on the characteristic of MIS to define an environment function fp to enhance access control granularity of RBAC model. In addition the concept of prerequisite permission is introduced for preventing improper authorization causing non- excution of authorized permission. Finally, an application of this improved model is given.