The selective restriction of who can view or use resources, enforced through identification, authentication, and authorization.
Access control determines who can do what with which resources. It works through identifying a user, authenticating that they are who they claim, and authorizing the specific actions they are permitted.
Common models include role-based access control, where permissions follow job roles, and attribute-based access control. Strong access control underpins confidentiality and limits the damage an account can do if misused.
Related frameworks
KaitoSec