CISSP-ISSAP: Information Systems Security Architecture Professional

By ISC · Question Mode

QuestionQ41

VerifiedIdentity and Access Management (IAM) Architecture

An organization has adopted a hierarchical approach to privilege management in which administrators have full access, HR managers have fewer permissions than administrators, and data-entry operators have no access to resources. Which access-control model has the organization implemented?

Explanation

Role-based access control assigns permissions to organizational roles and grants users access through their assigned roles. Role hierarchies can provide different privilege levels, such as full administrative access and reduced HR-manager access, based on job function.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!