Privileges and Access Management

Access levels depend on an individual’s role and data sensitivity.

Core Concepts

• Principle of Least Privilege (PoLP): Users retain the least amount of privileges required.
• PIM (Privileged Identity Management): Translates an individual’s role to an access role on a system.
• PAM (Privileged Access Management): Manages the privileges of an access role.

Security Models

• Bell-LaPadula Model (Confidentiality): Focused on access control via security layers (Top Secret, Secret, Confidential).
  • Rule: “No write down, no read up”. Each layer can read down, but not up.
• Biba Model (Integrity): Focused on data integrity across layers.
  • Rule: “No write up, no read down”. Each layer can read up, but not down.