Which model assigns permissions to a user role dynamically based on administrator-defined rules?

Which model assigns permissions to a user role dynamically based on administrator-defined rules?

• A. Role-Based Access Control
• B. Rule-based Access Control
• C. Centralized Authorization
• D. Mandatory Access Control

Answer: (B)

Dynamically assigning permissions based on administrator-defined rules describes a policy-driven approach where access decisions are made by evaluating conditions defined in rules at the time of access. In rule-based access control, those rules can consider who the user is, what resource is being accessed, and contextual factors like time or location. Because the rules are defined by an administrator and evaluated on each access request, permissions aren’t tied to a static role alone but to the outcome of rule evaluation. This makes access decisions flexible and context-aware, aligning with the idea of dynamically granting permissions as rules permit. Role-based access control binds permissions to specific roles, and users gain those permissions by being members of those roles, which is more static and not driven by per-request rule evaluation. Mandatory access control relies on fixed labels and classifications rather than administrator-defined dynamic rules, and centralized authorization refers to where decisions are made, not the mechanism by which permissions are granted.

Dynamically assigning permissions based on administrator-defined rules describes a policy-driven approach where access decisions are made by evaluating conditions defined in rules at the time of access. In rule-based access control, those rules can consider who the user is, what resource is being accessed, and contextual factors like time or location. Because the rules are defined by an administrator and evaluated on each access request, permissions aren’t tied to a static role alone but to the outcome of rule evaluation. This makes access decisions flexible and context-aware, aligning with the idea of dynamically granting permissions as rules permit.

Role-based access control binds permissions to specific roles, and users gain those permissions by being members of those roles, which is more static and not driven by per-request rule evaluation. Mandatory access control relies on fixed labels and classifications rather than administrator-defined dynamic rules, and centralized authorization refers to where decisions are made, not the mechanism by which permissions are granted.