Break-Glass access control (BGAC)
Présentation
Traditional access control has the purpose of restricting access, which is why most access control models follow the Principle of least privilege (POLP) and the default deny principle.
This behavior may conflict with operations of a system.
In certain situations, humans are willing to take the risk that might be involved in violating an access control policy, if the potential benefit of real-time access outweighs the risks.
This need is visible in healthcare where inability to access to patient records could cause death.
Backlinks