# Fine-grained ABAC for cloud applications

Grant access based on dynamic attributes.

[See a demo](/content/see-demo/index.html)

## Fine-grained access based on user, resource & environmental attributes

Attribute-Based Access Control (ABAC) refers to the practice of making authorization decisions based on fine-grained attributes. With ABAC you can develop very specific, fine-grained rules that protect your organizational resources.

ABAC policies can be used to make authorization decisions that include user attributes such as department or office, resource attributes such as location, or environmental attributes such as day/time.

## When roles aren't enough

Evolve your policy from RBAC to attribute-based access control to authorize based on user-centric attributes, resource attributes, and environmental attributes.

## Real-time authorization

Attributes about users and resources are synced to the policy decision point in your cloud automatically and in real-time to eliminate the risk of access based on stale data. Enforce policy in milliseconds against the most up-to-date data.

## Environment-based access

Influence both frontend behavior and backend logic based on where a user is logged in from, what region the application is running, or the day/time that an operation is invoked.

## Manage policies in one place

Centrally manage policies and decision logs to simplify governance and compliance.

## No lock-in

Built upon an open, cloud-native foundation, which includes Open Policy Agent (OPA), [Topaz](/content/use-cases/www.topaz.sh) authorizer, Policy CLI, and many of the ideas in the Google Zanzibar system.

Explore popular authorization use cases

[Multi-tenant RBAC](/content/use-cases/multi-tenant-saas-rbac/index.html)
[Attribute-based access control](/content/use-cases/attribute-based-access-control-abac/index.html)
[Relationship-based access control](/content/use-cases/relationship-based-access-control-rebac/index.html)
[Microservice authorization](/content/use-cases/microservices-access-control/index.html)

## Speak to us about your authorization challenges

[Speak with an engineer](/content/contact-engineer/index.html)