National Institute of Standards and Technology issues draft guidance on Attribute-based access control. ABAC is a logical access control methodology where authorization to perform a set of operations is determined by evaluating attributes associated with the subject (a user or employee) and object (a specific computerized resource) NIST says this process allows administrators to apply access control policies without prior knowledge of the specific user and for an unlimited number of users that might require access. NIST usually publishes a final version of the guidance several months after receiving comments.”]
Source: https://www.cuinfosecurity.com/guidance-aims-to-ease-access-control-a-5706