Discretionary access control systems offer a flexible approach to authorization, allowing users to assign access permissions to other users—the owners of files, computers, and other resources have the discretion to configure permissions as they see fit. Discretionary access control systems are the most common form of access control. In this video, learn the concept of discretionary access controls.
- [Instructor] Discretionary access control systems…offer a flexible approach to authorization.…Allowing users to assign access…permissions to other users.…The owners of files, computers, and other resources…have the discretion to configure…permissions as they see fit.…Discretionary access control systems…are the most common form of access control…because they provide organizations…with needed flexibility.…Imagine if users in your organization…didn't have the ability to assign…file rights to other users as needed,…and IT had to be involved in every request.…
That would certainly make life difficult, wouldn't it?…Let's look at an example of a…discretionary access control system.…Imagine that we have a file containing…information on some of the organizations' employees.…Alice, an analyst within Human Resources,…created the file and the operating system…recognizes her as the file owner.…Alice, however, created this file at Bob's request…and she wants Bob to have permission…to do everything that Alice can do.…So Alice gives Bob full control…
To join one of Mike's free study groups for access to bonus tips and practice questions, visit certmike.com.
- Identity and access management
- Using access cards and biometrics
- Multifactor authentication
- Password authentication protocols
- Device authentication
- Identity management life cycle
- Access control lists
Skill Level Intermediate
Q: This course was updated on 05/18/2018. What changed?
A: New videos were added that cover subject/object model. In addition, the following topics were updated: registration and identity proofing, SSO and federation, and advanced authorization concepts.