Glossary · Security & identity

ABAC

Attribute-Based Access Control

Updated

ABAC is an access control model that decides each request by evaluating attributes of the user, the data, the action and the context, such as role, purpose of use, sensitivity label or the patient's consent.

It is finer-grained than role-based access alone and is the model behind policies written in XACML or enforced with FHIR security labels.

Official source

FHIR Security: Authorization and Access Control

See also

Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →