Access Decision Models
Access Decision Models is the study and design of how people establish, exercise, verify, delegate, constrain, revoke and recover control within access and decision rights.
THE-04 · TOP-008
Access and Decision Rights
Failures in access decision models can expose people to identity fraud, unauthorised decisions, coerced data use, loss of access, unfair exclusion, surveillance and diminished human agency.
8 canonical Subtopics in this Topic.
Purpose-Limited Access
Purpose-Limited Access is the study and design of how people establish, exercise, verify, delegate, constrain, revoke and recover control within access and decision rights.
Least-Privilege Access
Least-Privilege Access is the study and design of how people establish, exercise, verify, delegate, constrain, revoke and recover control within access and decision rights.
Contextual Access
Contextual Access is the study and design of how people establish, exercise, verify, delegate, constrain, revoke and recover control within access and decision rights.
Continuous Authorisation
Continuous Authorisation is the study and design of how people establish, exercise, verify, delegate, constrain, revoke and recover control within access and decision rights.
Access Appeals
Access Appeals is the study and design of how people establish, exercise, verify, delegate, constrain, revoke and recover control within access and decision rights.
Machine Access Rights
Machine Access Rights is the study and design of how people establish, exercise, verify, delegate, constrain, revoke and recover control within access and decision rights.
Auditability of Access Decisions
Auditability of Access Decisions is the study and design of how people establish, exercise, verify, delegate, constrain, revoke and recover control within access and decision right
Stories from Access and Decision Rights
Scenario narratives — not empirical findings.
Access Decision Models
By the third lesson, Owen could see which students the new support helped and which students had simply learned to hide their confusion. Current digital and institutional systems show material gaps in access decision mod
Read the full story →Purpose-Limited Access
The first customer did not ask Ravi for more features. They asked what would happen when the system was wrong. Current digital and institutional systems show material gaps in purpose-limited access, especially where iden
Read the full story →Least-Privilege Access
The ward was not short of data. It was short of quiet moments in which somebody could decide what the data meant. Current digital and institutional systems show material gaps in least-privilege access, especially where i
Read the full story →Contextual Access
The first customer did not ask Thomas for more features. They asked what would happen when the system was wrong. Current digital and institutional systems show material gaps in contextual access, especially where identit
Read the full story →Continuous Authorisation
The system crossed the border in a day. Its assumptions about language, authority and trust did not travel nearly as well. Current digital and institutional systems show material gaps in continuous authorisation, especia
Read the full story →Access Appeals
The exercise began with a simulated outage and became a test of whether people could still coordinate when the dashboards disappeared. Current digital and institutional systems show material gaps in access appeals, espec
Read the full story →Machine Access Rights
At 8:10 on Monday morning, Ravi, the patient advocate, removed the word “successful” from the programme dashboard. Current digital and institutional systems show material gaps in machine access rights, especially where i
Read the full story →Auditability of Access Decisions
The nearest specialist was four hours away, so the community had become expert at making imperfect systems work. Current digital and institutional systems show material gaps in auditability of access decisions, especiall
Read the full story →