Glossary: Identity and Access Management

rule-based access control

Also written: rule-based

An access control model where administrator-set rules apply to every request, whoever makes it, such as "no payroll from outside the office". A firewall rule list is an example. Rules look at the request, while roles look at the person's job.