An access-control approach that decides access based on attributes of the user and resource.
Short for Attribute-Based Access Control. It controls access using flexible policies that combine attributes of the user, resource, and environment. It allows finer-grained control than role-based RBAC, but policy design tends to get more complex.
© 2026 ITBGM