Access control models

Applications leverage industry‑standard access control models to consistently evaluate authorization decisions. The Aikyam Identity Platform authenticates users and provides applications with required access metadata, such as assigned roles, user-group membership attributes, and group memberships.

The platform defines and grants access, and the application determines how that access is enforced.

To support these authorization decisions, the platform enables applications to use well‑established access control models such as RBAC and ABAC.

• Role-based access control (RBAC)
  RBAC assigns access based on predefined roles that aggregate permissions. This model ensures clarity, consistency, and least‑privilege enforcement by limiting users to only the roles relevant to their duties.
• Attribute-based access control (ABAC)
  ABAC evaluates identity attributes such as user profile details or custom-defined attributes associated with the user’s group to determine access. This model supports scenarios where user characteristics influence the level or scope of access they should receive.

Together, these models support flexible, secure, and responsibility‑aligned authorization across applications.