> For the complete documentation index, see [llms.txt](https://docs.objectsgrid.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.objectsgrid.com/documentation/private-objects/abac-policy.md).

# ABAC Policy

Manage object access using ABAC policies

ABAC ([Attribute-Based Access Control](https://en.wikipedia.org/wiki/Attribute-based_access_control)) is an authorization model that controls access to resources based on attributes (Tags) rather than fixed roles or permissions. It provides fine-grained access control by evaluating who (subject), what (object), and how (action) based on contextual attributes.

The ABAC rules are contained in the Organization Account's ABAC Policy Object. 

A default ABAC policy is automatically created when a new Organization Account is registered. Administrators can modify it to suit their specific needs.

***

Our ABAC Policies are [Open Policy Agent](https://www.openpolicyagent.org/) (OPA) compliant. OPA is a graduated project of [Cloud Native Computer Foundation](https://www.cncf.io/projects/), and de-facto industry standard for policy language. \
OPA uses the [Rego Policy Language](https://www.openpolicyagent.org/docs/latest/policy-language/). You can use the [Rego Playground](https://play.openpolicyagent.org/) as a policy development environment.

To find out more about ABAC and how it compares with Role-Based Access Control (RBAC), please refer to our [Blogs](/blogs.md).

***

## ABAC Policy Object Attributes

<table><thead><tr><th width="191">Name</th><th width="174">Type</th><th>Description</th></tr></thead><tbody><tr><td>id</td><td>String</td><td>The unique identifier for ABACPolicy</td></tr><tr><td>policy</td><td>String</td><td>The ABACPolicy string - rego policy contents</td></tr><tr><td>tags</td><td>Array of <a href="#tag-anchor">Tag</a></td><td>Object Tag</td></tr><tr><td>meta</td><td>Object <a href="/documentation/objects-grid-objects/meta-object.md">Meta</a></td><td>Object's meta data, read only</td></tr></tbody></table>

***

{% hint style="danger" %}
[Contact Support](/support.md)
{% endhint %}

***