Attribute-Based Access Control

Definitions

1. An access-control model where authorization decisions are based on attributes of the user, resource, action, and environment rather than only on fixed roles. ABAC allows fine-grained policy decisions but can become complex to manage at scale.

   In plain English: An access system that decides permissions using many attributes, not just broad roles.

   Example: "They moved from simple roles to attribute-based access control so geography and device posture could affect access decisions."

Related Terms

• RBAC
• ABAC
• Grace Period
• NAC
• Network Access Control
• Policy Engine
• Role-Based Access Control
• FedRAMP
• Permission Model
• Resource Access