D03 · Authorization & Access Control

Key knowledge areasCopy Anchor Link

• Access Control Lists (ACL)
• Role-Based Access Control (RBAC)
• Attribute-Based Access Control (ABAC)
• Relationship-Based Access Control (ReBAC)
• Policy-Based Access Control
• Policy Decision Points (PDP)
• Policy Enforcement Points (PEP)
• Authorization Policy Engines
• Delegated Authorization
• Least Privilege
• Fine-Grained Authorization

Career alignmentCopy Anchor Link

• TRACK A — Identity Platform & CIAM Engineering: Core domain. View track
• TRACK B — Enterprise IAM / PAM / IGA Engineering: Core domain. View track

Suggested learning outcomesCopy Anchor Link

• Compare ACL, RBAC, ABAC and ReBAC.
• Write and test least-privilege policy decisions.

These prompts are editorial learning aids retained from the earlier textbook. They are not additional requirements in v0.4.

Connected questionsCopy Anchor Link

• How should a DevOps engineer reach production?
• Who owns the identity connecting to your database?
• When an AI agent acts, whose authority does it use?

Build competency evidenceCopy Anchor Link

Explain a mechanism, analyze an implementation or failure, build a tested lab, and justify an architecture. Keep shared technical explanations in the Knowledge Base and link to them from research.

Domain name, scope, knowledge areas and representative technologies follow the authoritative Framework v0.4. Questions may span multiple domains.