Definition
Attribute-Based Access Control (ABAC) is an Authorization model in which an access decision depends on attributes of the user, resource, requested operation and context.
Human Explanation
The system may consider not only a user's role but also location, time, device, security level or other defined conditions.
Why it Matters
ABAC enables more flexible and precise access management in complex environments.
Conceptual Boundary
ABAC does not necessarily replace RBAC. Many organisations combine the two models so that they complement one another.
Practical Perspective
More attributes can provide finer control, but they also increase the complexity of managing and testing the system.