Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
An access control paradigm that grants rights through policies combining attributes of users, resources, and environment for fine-grained, context-aware access decisions.
Attribute Based Access Control Definition: An access control paradigm that grants rights through policies combining attributes of users, resources, and environment for fine-grained, context-aware access decisions.
This is an access control paradigm whereby access rights are granted to users with policies that combine attributes together. ABAC evaluates dynamic attributes such as user properties, resource characteristics, environmental conditions, and contextual information to make access decisions. Unlike role-based approaches, ABAC offers fine-grained control through complex, flexible policies. This model is recommended in frameworks like NIST SP 800-162 and is particularly well-suited for modern distributed architectures. Organizations implement ABAC through policy engines that evaluate attribute rules in real-time, often using technologies like XACML. For example, a government agency might use ABAC to restrict document access based on user clearance level, document classification, time of day, and network location. Related terms: Role-based access control, Policy-based access control, Zero trust architecture, Least privilege, Access control matrix.
Attribute Based Access Control is one of the topics you'll master in the Security+ Boot Camp.
Security+ Boot Camp →