U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

SP 800-162

Guide to Attribute Based Access Control (ABAC) Definition and Considerations

Date Published: January 2014 (includes updates as of 02-25-2019)

Supersedes: SP 800-162 (01/16/2014)


Vincent Hu (NIST), David Ferraiolo (NIST), Richard Kuhn (NIST), Adam Schnitzer (BAH), Kenneth Sandlin (MITRE), Robert Miller (MITRE), Karen Scarfone (Scarfone Cybersecurity)



access control; access control mechanism; access control model; access control policy; attribute based access control (ABAC); authorization; privilege
Control Families

Access Control


SP 800-162 (Includes updates as of Feb. 25, 2019)

Supplemental Material:
None available

Document History:
02/25/19: SP 800-162


Security and Privacy
access authorization; access control