Access Control Models (RBAC, ABAC)

Summary

Role-Based Access Control assigns permissions based on job role; Attribute-Based Access Control makes decisions based on multiple attributes (user, resource, environment) — different levels of flexibility for controlling access.

How to Learn This

1Design a simple RBAC model for a hypothetical organization's systems.
2Learn when ABAC's added flexibility is worth its added complexity over simpler RBAC.
3Understand why 'least privilege' should guide role/attribute design regardless of model.

Multi-Factor Authentication

Zero Trust Architecture

More topics in Core Security Concepts

Authentication vs Authorization Encryption Basics (Symmetric vs Asymmetric)Hashing & Password Security Public Key Infrastructure (PKI)Multi-Factor Authentication Zero Trust Architecture Security Policies & Standards Defense in Depth The CVE & CVSS System

Stuck on this topic? Ask an Insider

Get 1:1 guidance from people who've walked this exact path — free on the InsideEdge app.

Download