Certified Identity and Access Manager (CIAM) Practice Exam

Access control models are the frameworks that define how permissions are assigned and enforced across resources. They specify the rules, roles, attributes, and constraints that govern who can access what data or systems and under which conditions. This category includes models like RBAC, ABAC, MAC, and DAC, which provide the structured approach to making and enforcing access decisions.

Digital identity describes a digital representation of a person, mainly used for authentication, not the framework for defining access rights. Identity management is the broader discipline that covers the lifecycle and governance of identities, not specifically the rule-set for access decisions. Provisioning handles the operational process of granting, updating, or revoking access across systems, rather than the governing frameworks themselves.