Attribute-Based Access Control

Attribute-Based Access Control — An authorization model that evaluates policies over attributes of the subject, resource, action, and environment.

Cybersecurity Context

ABAC can express fine-grained context-sensitive rules without creating a role for every combination, but policy evaluation becomes harder to audit and test. Attribute provenance, freshness, conflict resolution, and deny-overrides behavior must be explicit.

Related Security Concepts

• Role-Based Access Control
• policy engine
• least privilege
• authorization