2
$\begingroup$

What is the difference between access control and authorization? They do not mean same as there is a fine line between the two.

Improve this question
$\endgroup$

2 Answers 2

Reset to default
1
$\begingroup$

Access control is a broader concept that includes authentication, authorisation, accounting and possibly other components contributing to the control of access. Authorisation only concerns granting or denying permissions according to a security model and policies.

Improve this answer
$\endgroup$
0
0
$\begingroup$

According to CISSP

There are several areas within access control. Those areas include IAAA (Identification, Authentication, Authorization and Accountability), access control techniques & technologies, administration, control methods, control types, accountability, control practices, monitoring and threats to access control.

In addition, access control is more of a concept. It can be physical (gates) or logical (computers). Authorization tends to relate to logical only.

Authorization in software relates to:

  • Role-based access control (RBAC)
  • Attribute-based access control (ABAC)
  • Access control lists (ACL)
Improve this answer
$\endgroup$
0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.