Glossary · Information security
Access Control
The selective restriction of who can view or use resources, enforced through identification, authentication, and authorization.
Access control determines who can do what with which resources. It works through identifying a user, authenticating that they are who they claim, and authorizing the specific actions they are permitted.
Common models include role-based access control, where permissions follow job roles, and attribute-based access control. Strong access control underpins confidentiality and limits the damage an account can do if misused.