Attribute-Based Access Control (ABAC)
An access model where a decision is computed from attributes of the subject, resource, action, and environment — the engine behind most Zero Trust and situational access decisions.
aka: ABAC
Where RBAC answers “what is this person’s role,” ABAC answers “given everything true about this request right now, is it allowed” — which is what makes it the natural engine for Zero Trust, where the same person’s access legitimately changes by time, device, and location. The cost is the reverse-query problem: knowing everything one person can access means evaluating the policy against every resource, not reading one row off a table.