Attribute-Based Access Control (ABAC) User Guide

Important:

The Attribute-Based Access Control (ABAC) Phase 1: Foundations feature is under Public Preview. Please contact OneTrust Support to request early access.

The Attribute-Based Access Control (ABAC) User Guide provides a centralized entry point for understanding, planning, implementing, and managing ABAC across the OneTrust Platform. This guide includes foundational concepts, planning and readiness guidance, implementation playbooks, procedural configuration articles, and solution-specific recommendations. Together, these resources help organizations adopt a least-privileged access model and provide more precise access to records based on assignments, attributes, sharing, and workflows, improving governance while supporting collaboration across teams.

Use this guide to progress from foundational concepts and implementation planning to configuring core ABAC capabilities and understanding how ABAC is applied across OneTrust solutions.

Part 1: Getting Started with Attribute-Based Access Control (ABAC)

Start here to build a foundational understanding of ABAC concepts, scope, and planning considerations before configuring or using ABAC. Read these articles in order to understand how ABAC works, how it complements Role-Based Access Control (RBAC), what is supported, and the key considerations for planning and implementing ABAC in your organization.

Articles:

  1. Attribute-Based Access Control (ABAC) Overview

    Learn what ABAC is, why OneTrust is introducing it, how access is determined, and what capabilities are available in Public Preview and planned for future releases.

  2. Understanding Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC)

    Understand the differences between RBAC and ABAC, how broad role-based access compares to granular record-level access, and how the two models work together to support a least-privileged access strategy.

  3. Using the Basic Role for Attribute-Based Access Control (ABAC)

    Discover how the Basic role supports least-privileged access and why it is recommended for viewers, collaborators, reviewers, approvers, and other users who primarily need access to specific records.

  4. Before Enabling Attribute-Based Access Control (ABAC) in Your Tenant

    Review tenant-wide implications, rollout considerations, and key prerequisites before enabling ABAC.

  5. Supported Objects, Exclusions & Timelines for Attribute-Based Access Control (ABAC)

    Understand which objects support ABAC, what’s excluded, and when additional coverage will be available.

  6. Assessment Considerations for Attribute-Based Access Control (ABAC)

    Review assessment-specific ABAC behavior, supported functionality, limitations, and implementation considerations that may differ from standard object behavior.

  7. Reporting Considerations for Attribute-Based Access Control (ABAC)

    Review reporting-specific ABAC behavior, supported functionality, limitations, and important considerations.

  8. Attribute-Based Access Control (ABAC) FAQ

    Find answers to common questions, edge cases, and clarifications to better understand ABAC behavior and limitations.

  9. Implementation Playbooks: Attribute-Based Access Control (ABAC)

    Prepare for ABAC through access-planning exercises and choose a playbook based on whether you are implementing OneTrust for the first time or adopting ABAC in an existing tenant.

Part 2: Attribute-Based Access Control (ABAC) Capabilities

Put ABAC into practice by configuring assignments, managing record ownership, granting and managing access, automating assignment-based access through user attributes and workflows, and reviewing access-related audit history. Use these procedural articles to define record-level permissions, control how users receive access, manage access throughout a record's lifecycle, and track access-related changes over time.

Articles:

  1. Managing Assignments with Attribute-Based Access Control (ABAC)

    Create and manage assignments that define what users can do on a record and support access granted through sharing, user attributes, and workflows.

  2. Managing Record Admins & Ownership with Attribute-Based Access Control (ABAC)

    Learn how Record admin assignments work, how access requests are managed, and how to automatically assign Record admin responsibilities through access rules.

  3. Sharing, Requesting, and Managing Access with Attribute-Based Access Control (ABAC)

    Share records, request access, review who has access, and modify or revoke access using ABAC assignments.

  4. Configuring Attribute-Based Access Control (ABAC) Assignments for User Attributes

    Configure user attribute assignments to automatically grant record-level access based on ownership, responsibility, and other user attribute relationships.

  5. Configuring Attribute-Based Access Control (ABAC) Assignments for Workflows

    Use workflows to grant assignment-based access during specific workflow stages and automate ownership and responsibility assignments through workflow rules.

  6. Auditing Access Changes with Attribute-Based Access Control (ABAC)

    Review record access and assignment audit history to understand what changed, who made the change, and when the change occurred.

Part 3: Attribute-Based Access Control (ABAC) Across Solutions

Explore how ABAC is applied across OneTrust solutions and how assignments, attributes, and workflows support different access-control scenarios. Use these articles to understand common use cases, supported objects, implementation considerations, and recommended approaches for configuring ABAC within a specific solution.

Articles: