Role based access control with the security administration manager (SAM)

Abstract

Security administration in large computer environments is a complex and expensive task. Many companies handle it by giving security administrators ownership of all data. If an update is required, a more or less automated workflow is in place to notify the administrator. This process is slow and error-prone. This practice is not mandatory access control (MAC) (no data labeling, etc.), it is rather a “degenerated” form of discretionary access control (DAC).