From the course: CISSP Cert Prep (2021): 5 Identity and Access Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Discretionary access controls

Discretionary access controls

From the course: CISSP Cert Prep (2021): 5 Identity and Access Management

Start my 1-month free trial

Discretionary access controls

- [Instructor] Discretionary Access Control Systems, or DAC systems, offer a flexible approach to authorization, allowing users to assign access permissions to other users. The owners of files, computers, and other resources have the discretion to configure permissions as they see fit. Discretionary access control systems are the most common form of access control because they provide organizations with much needed flexibility. Imagine if users in your organization didn't have the ability to assign file rights to other users as needed and IT had to be involved in every request. Now that would certainly make life difficult, wouldn't it? Let's take a look at an example of a discretionary access control system. Imagine that we have a file containing information on some of the organization's employees. Alice, an analyst within human resources, created this file and the operating system recognizes her as the file owner. Alice…

Contents