ABAC

ABAC :

Attribute-Based Access Control

Attribute-Based Access Control (ABAC) is a security model that grants or denies access to resources based on the attributes of users, the environment, and the resources themselves. In contrast to traditional access control methods, such as Role-Based Access Control (RBAC), which rely on predefined roles, ABAC allows for more granular access decisions by evaluating dynamic attributes. These attributes can include user characteristics (such as job title, department, or security clearance), environmental conditions (like time of access or location), and resource attributes (for instance, the sensitivity of the data).

The flexibility of ABAC makes it particularly useful in complex environments where access needs may vary significantly. For example, an employee may have access to certain sensitive data only during business hours, or only if they are accessing it from a secure network. This model enhances security by ensuring that access rights can adapt to specific situations and policies, reducing the risk of unauthorized access and improving compliance with regulatory requirements. By implementing ABAC, organizations can better manage who has access to what, based on a wide range of factors rather than relying solely on static roles.

---

[...] is an authorization model that evaluates attributes (or characteristics), rather than roles, to determine access. The purpose of ABAC is to protect objects such as data, network devices, and IT resources from unauthorized users and actions—those that don’t have “approved” characteristics as defined by an organization’s security policies. https://www.okta.com/blog/2020/09/attribute-based-access-control-abac/