Policy-Based Access Control
Policy-Based Access Control is an authorization model in which access is decided from policies evaluated by a decision center.
- Acronym
- PBAC
- Synonym
- PBAC
Definition
Policy-Based Access Control, or PBAC, is an authorization model where rules are expressed as policies and evaluated centrally to determine whether a user action should be allowed, denied, or constrained. It is designed to support broad use-case coverage, fine-grained access, and real-time change in authorization behavior, but it requires strong IAM maturity and clear business modeling.
Why it matters
Policy-based access control replaces hardcoded permission checks with declarative rules evaluated at decision time. It makes authorization logic explicit, testable, and independent from application deployment cycles.
The Ariovis perspective
Roles are useful when they reflect stable business responsibilities and remain governable. Ariovis avoids forcing every exception into the role model and complements roles with controlled requests or contextual authorization.
Related services
Resources
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.