Access controls are mechanisms that govern which subjects may perform which operations on resources, enforcing authorisation policies.
Semantic Classification
Content
- Access controls determine and enforce permissions for users, services and processes. They follow models such as discretionary, mandatory, role-based and attribute-based access control, each defining how rights are assigned.
- Effective access control depends on prior authentication to establish identity. Controls are applied at operating system, network, application and data layers to limit actions to those that are authorised.