Safety & Security · Data artifact

Attribute-Based Access Policy

Data artifactSafety & SecuritySafety, Security & Governancearc:AttributeAccessPolicy

A declarative ABAC rule set combining agent, resource, action and environmental attributes into context-dependent authorization and approval requirements.

Responsibility. Encodes business logic that static role permissions cannot express.

Also known as: ABAC policy

Direct neighbourhood (hover for relationship types)

Relationships

configures structural

Authorization Policy Decision Point Ch9.2

Quantitative guidance

As stated by the sources; verify before use.

Example: refunds up to $500 autonomous; above $500 manager approval in business hours; all refunds director approval outside business hours (Ch9.2).

Classification

Patterns: Attribute-Based Access Control (ABAC)

Sources

Ch9.2: T. Nguyen, "Action Constraints and Permission Models," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.2. ISBN: 9798244538229.