Centralized and Decentralized Access Control

Centralized access control is an access control approach in which a single common entity, such as an individual, a department, or a device, decides who can get into systems and networks, which means that access controls are managed centrally, rather than locally. Owners decide which users can get to which objects, and the central administration supports the owners’ directives. Centralized authentication services are applied and enforced through the use of authentication, authorization, and accounting (AAA) servers.

The benefits of using AAA servers include the following:

  • Involves less administration time because user accounts are maintained on a single host

  • Reduces design errors because different ...

Get Fundamentals of Information Systems Security, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.