← Security+ glossary

Authorization models

Models that determine who is granted access: RBAC assigns rights according to role, DAC lets the data owner grant access themselves, MAC has the system determine access based on fixed sensitivity labels that the user cannot change, and ABAC decides based on attributes such as department, time and device.

All Security+ guides →