Zugriffskontrolle (EN)

Access Control

Access control is a technical and organizational measure that restricts access to personal data and IT systems to authorized persons. It ensures that only authorized users can view, modify, or delete data. Access controls can be implemented through authentication, authorization, and logging and are an essential part of data protection.

Architecture

flowchart TD     A[User] --> B{Authentication}     B -->|Successful| C[Authorization]     B -->|Failed| D[Access denied]     C --> E[Roles & Permissions]     E --> F[Resource access]     F --> G[Database/Application]     F --> H[File system]     G --> I[Logging]     H --> I 

In Context

• Typically used together with firewalls, intrusion detection systems, and encryption
• Related to: Identity and Access Management (IAM), Multi-Factor Authentication, Single Sign-On
• Example use case: Banks use access control to make customer data accessible only to authorized employees