ABAC (Attribute-Based Access Control)

Granting access based on attributes — of the user, the resource, and the context (department, time, sensitivity) — rather than fixed roles. Flexible but more complex to reason about.