Most city staff access systems by job role, a few apps must also co…

Question

Most city staff access systems by job role, a few apps must also consider time-of-day and building location, and a small set of highly labeled records require system-enforced labels users cannot override. Which access-control mix best matches that need?

Accepted Answer

Use RBAC for most staff, ABAC attributes for time/location-sensitive apps, and MAC for highly labeled data — Think badges by job (RBAC), extra rules about when and where (ABAC), and sealed classified folders nobody can casually re-label (MAC). Match the model to how strict the data really is.

Answer

Use discretionary access control alone for every system including labeled intelligence extracts

Answer

Remove all access models and rely on verbal approval in hallway conversations

Answer

Grant every employee unrestricted write access and audit later

Most city staff access systems by job role, a few apps must also consider time-of-day and building location, and a small set of highly labeled records require system-enforced labels users cannot override. Which access-control mix best matches that need?

Short Explanation

Full Explanation