What is ABAC
Attribute-based access control
ABAC (Attribute-Based Access Control) is an access control model where decisions are made based on attributes of users, resources, and environment.
Key Components
- Subject attributes — role, department, position
- Resource attributes — type, owner, classification
- Environment attributes — time, location, device
- Policies — rules based on attributes
Comparison with RBAC
| RBAC | ABAC | |------|------| | Static roles | Dynamic attributes | | Simple setup | Flexible configuration | | Limited context | Rich context |
Policy Examples
- Access only during business hours
- Access only from corporate network
- Access to own department documents
Benefits
- Granular control
- Dynamic decisions
- Fewer roles to manage
- Compliance alignment