Comparison of Access Control Models:
DAC, MAC, RBAC, ABAC
Feature DAC MAC RBAC (Role- ABAC
(Discretionary (Mandatory Based Access (Attribute-
Access Control) Access Control) Control) Based Access
Control)
Access Based Owner’s System- User roles (job Attributes
On decision enforced positions) (user, resource,
security labels action,
environment)
Control Type User/owner Central Administrator Policy engine
controls access authority assigns roles evaluates
controls access and attributes and
permissions conditions
Flexibility High flexibility Very rigid Moderate Highly flexible
flexibility
Security Level Low to High (used for Moderate Very High
Moderate sensitive data)
Policy Simple Strict and Simple to Complex
Complexity inflexible moderate
Scalability Not suitable for Poor scalability Good scalability Excellent
large systems scalability
Real-Time User shares a Only 'Top Teacher role Finance
Example file with others Secret' users accesses grades employee
access sensitive accesses data
data during office
hours
Best Suited For Small/personal Military, Enterprises Cloud,
systems defense healthcare,
finance