There are 4 main types of access control, which are:
- Discretionary Access Control (DAC) – The owner of the data decides who can access it.
- Mandatory Access Control (MAC) – Access is controlled by a central authority based on security policies.
- Role-Based Access Control (RBAC) – Permissions are assigned based on user roles (e.g., IT Manager, Employee).
- Attribute-Based Access Control (ABAC) – Access is granted based on user attributes like job title, location, or device type.