Permission Model

Definitions

1. The design by which a system defines, groups, grants, and enforces permissions for users, services, and other identities. A good permission model makes least privilege possible and understandable; a bad one creates confusing privilege combinations and hidden escalation paths.

   In plain English: The structure a system uses to define and enforce access rights.

   Example: "The mobile app's permission model was too coarse, so any staff member with support access could also read billing history."

Related Terms

• RBAC
• ABAC
• Access Control List
• Least Privilege
• Mandatory Access Control
• Role-Based Access Control
• Permission
• Role
• Attribute-Based Access Control
• Identity Management
• IDM
• MPA
• Overprivileged
• Principle of Least Privilege
• Resource Access
• Authorization Flow
• Authorization Policy