Policy-Based Access Control

nounverified·updated May 9, 2026

GlossaryL1 — what DictionaryL2 — how used ThesaurusL3 — relations Universaleverything

A form of access control that uses an authorization policy that is flexible in the types of evaluated parameters (e.g., identity, role, clearance, operational need, risk, and heuristics).

MWENISTIR 7298: Glossary of Key Information Security Terms, Revision 2

Classifications

per-axis with provenance

Entity Type

Control92%rule-basedr:entity.control.safeguard.v1

?unassignedlast reviewed —

Sensitivity

unclassified

Information Class

unclassified

Variants

4 surface forms

acronym: PBAC
plural: Policy-Based Access Controls
possessive: Policy-Based Access Control's
pluralpossessive: Policy-Based Access Controls'

Continue to:Dictionary →How is this term used per framework?Thesaurus →How does this term relate to other terms?Universal →Everything in one page.