Advisory Note: Unifying RBAC and ABAC in a Dynamic Authorization Framework - 72611

Mastering authorization is critical for modern organizations  with multiple user constituencies, applications, and data types. Groups are necessary but not sufficient in complex environments. Roles are handy for adding manageability and assurance to coarse - or medium - grained  authorization but break down in the face o f dynamic environments or complex access policies. A ttribute - based access control (ABAC) has gained adherents, but is in fact just another piece of  the puzzle. In this note, KuppingerCole will unfold the dimensions of a unified authorization framework inco rporating  all of  the above and more.