Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint
Share this Page URL
Help

5. Managing Users and Data with Dynamic ... > The Building Blocks of DAC

The Building Blocks of DAC

There are two fundamental components of Dynamic Access Control: claims and resource properties.

If I state, “I live in New York,” I am making a claim. Claims have been integrated into Kerberos authentication in Server 2012. With claims, you can identify and configure permissions for users and devices based not only on the security groups to which they belong, but also on claims you configure, such as, “This user’s security clearance is High.”

A resource property is a customizable label that you can apply to data to classify it. You can create resource properties that identify a file or folder as Sensitive, Confidential, Human Resources Group Only, or any other properties you may need to keep data safe in your organization.


  

You are currently reading a PREVIEW of this book.

                                                                                                                    

Get instant access to over $1 million worth of books and videos.

  

Start a Free Trial


  
  • Safari Books Online
  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint