Attribute-Based Access Control (ABAC): A model that controls access to resources based on the evaluation of attributes associated with the user, the resource to be accessed, and current environmental conditions. This sophisticated method allows for flexible, fine-grained access control, catering to a wide range of potential scenarios. ABAC is particularly useful in complex environments where role-based access control (RBAC) may be too rigid or insufficient.
Categories: CC D3: Access Controls Concepts | CCSP D5: Cloud Security Operations | CISM D3: Information Security Program | CISSP D5: Identity and Access Management (IAM) | Security+ D1: General Security Concepts | SSCP D2: Access Controls
« Back to Glossary Index