Attribute-based access control (ABAC) is a strategy in which access rights are given to the users through the use of policies consisting of attributes that function together. In order to describe access control rules and access requests, ABAC uses attributes as the building blocks.