Security Attributes

The platform implements a centralized Attribute-Based Access Control (ABAC) framework using Security Attributes to control visibility and access across pricing, subscription, customer, and operational entities.

Security Attributes provide fine-grained authorization by evaluating whether a user’s assigned attributes match the security configuration of a resource.

This enables secure and scalable access control across enterprise environments without relying solely on static role-based permissions.

Security filtering can be applied across:

• rate lists
• charge rules
• plans
• base plans
• add-ons
• customers
• Employee

Purpose of Security Attributes

Security Attributes are designed to provide:

• multi-dimensional access control
• tenant-level data isolation
• region-based visibility restrictions
• controlled pricing visibility
• secure subscription access
• enterprise-grade authorization governance

The framework ensures users can only access resources aligned with their assigned business dimensions.

Core Security Model

The ABAC framework evaluates access using two primary components:

Component	Description
Subject Attributes	Attributes assigned to authenticated users
Resource Attributes	Attributes assigned to entities/resources

Access is granted only when the subject’s attributes satisfy the resource’s security requirements.

Security Matching Logic

The ABAC engine evaluates access using multi-dimensional attribute matching.

OR Logic Within a Dimension

If multiple values exist inside the same dimension, any overlapping value grants eligibility for that dimension.

Example

region = north OR east

If the user belongs to either north or east, the dimension passes validation.

AND Logic Across Dimensions

All configured dimensions must match simultaneously for access to be granted.

Example

region match
AND
department match
AND
tier match

Failure in any dimension results in access denial.

Authorization Evaluation Example

User Attributes

Resource Attributes

region = north,south
department=sales

Authorization Result

Access Granted

Because:

• region overlaps (north)
• department overlaps (sales)

Administrative Access

Administrative users bypass Security Attribute filtering entirely.

Administrative access provides unrestricted visibility across.

Create Security Attributes

1. Click on My Account
2. Click on My Team
3. Click on the Security Attributes tab
   
4. Click on the Create button
5. Add name and values of attributes
6. click save button to save attributes
   

Summary

The Roles Module is the central access-profile management system within the platform’s IAM architecture, enabling scalable RBAC by aggregating Permission Lists into reusable authorization profiles for Users and User Groups.