ABAC Terms and Definitions

ABAC Attribute

A characteristic or property used to categorize users and determine access rights (e.g., "department," "location," "job level")

ABAC Value

A specific instance of an attribute (e.g., "Marketing" is an attribute value of the "Department" attribute)

ABAC Profile

A collection of entitlements associated with a specific attribute value (e.g., "Marketing Department Profile," "New York Office Profile," "Manager Level Profile")

Birthright Access

Entitlements automatically granted based on attribute values within the ABAC profile

Default Profile

Applied when a user has the attribute but their value doesn't match any defined profile

None Profile

Applied when a user doesn't have the attribute defined at all

Concatenated Attribute

An ABAC attribute created by combining multiple attributes in a specific order (e.g., Department + Location = "Marketing-NYC")

Mixed Attribute

An ABAC attribute that combines both identity and service user attributes (e.g., Department + Service Environment)

Separator

The character or string used to join attributes in concatenation (e.g., dash, underscore, space)

Attribute Precedence

The priority order that determines which attribute takes precedence when conflicts arise in mixed attribute scenarios