Attribute-based access control: Difference between revisions

Revision as of 06:19, 30 August 2023

Revision as of 15:59, 30 August 2023

Line 1:

{{Short description|Access control paradigm where access is evaluated based on attributes related to the subject, the object, requested operations and in some cases environmental attributes}}

{{Short description|Method of identity management in IT}}

'''Attribute-based access control''' ('''ABAC'''), also known as '''policy-based access control''' for [[Identity management|IAM]], defines an access control paradigm whereby a subject's authorization to perform a set of operations is determined by evaluating attributes associated with the subject, object, requested operations, and, in some cases, environment attributes.<ref>{{Cite web|last=Computer Security Division|first=Information Technology Laboratory|date=2016-05-24|title=Attribute Based Access Control {{!}} CSRC {{!}} CSRC|url=https://csrc.nist.gov/Projects/Attribute-Based-Access-Control|access-date=2021-11-25|website=CSRC {{!}} NIST|language=EN-US}}</ref>