Attribute-Based Access Control (ABAC) enables fine-grained access control for Sift resources through a combination of:
- User Attributes: Metadata attached to users (principals) that describe their roles, teams, permissions, and organizational context
- Resource Attributes: Metadata attached to resources (channels, runs, assets) that describe their classification, ownership, status, and sharing settings
- Access Policies: Cedar-based authorization rules that evaluate user and resource attributes to grant or deny access