Best Practices in Enterprise Authorization:

RBAC/ABAC/NGAC Hybrid Approach

A long-standing debate in the IT community has been whether Role-Based Access Control or Attribute-Based Access Control is a better model for authorization management. 

In this white paper, we discuss the RBAC versus ABAC models for authorization, lay out the benefits and weaknesses of each approach, and offer a real-time RBAC/ABAC hybrid model that retains the advantages of each while avoiding their major weaknesses.