What is Access Control
Managing access rights
Access Control is a system for managing who has access to resources and what actions they can perform.
Main Models
- DAC — discretionary (owner decides)
- MAC — mandatory (system decides)
- RBAC — role-based
- ABAC — attribute-based
System Components
- Identification — who you are
- Authentication — proving identity
- Authorization — what you're allowed
- Audit — action logging
Principle of Least Privilege
Users receive only the rights necessary to perform their tasks. This reduces the risk of:
- Accidental errors
- Abuse
- Attack scope
Implementation
- Active Directory / LDAP
- IAM (AWS, Azure, GCP)
- OAuth 2.0 / OpenID Connect
- Keycloak, Okta