Glossary: Identity and Access Management

ABAC (attribute-based access control)

Also written: attribute-based access control

An access control model where one policy combines attributes of the subject (such as department), the object (such as its label), the action (read or write) and the environment (network, device, time). It is the most precise model and the hardest to read and test. Cloud IAM policies and conditional access are ABAC.