cisco certification manager

cisco certification manager.access to all objects that this user previously had access to.Multiple roles can be assigned to a subject, and a role can have multiple subjects. Similarly, it is possible for a role to have bothhave multiple permissions, and it is possible to assign the same permissions to multiple roles. In this way, a many-to-many relationship is established. RBACmodel conforms to the three principles of least privilege, separation of duties, and data abstraction.A system that can be configured to enable the RBAC model implements the principle of least privilege by assigning the minimum privilege required to perform a specific task to a single role. The system can be configured to create two mutually exclusive roles required to complete a task, which implements the principle of separation of duties. Systems that enable the RBAC model achieve data abstraction by using abstract permissions (let's say that the object [to the subject] is just a lock with only two permissions, open and close, rather than the typical read, write, and execute permissions).According to the RBAC standard proposed by NIST, the RBAC model consists of the following 3 components.196 Chapter 4 Introduction to Access ControlCore RBAC (CoreRBAC): is the basic component of the RBAC model and performs basic authorization operations based on the user's role. A session in an RBAC context is a way for a subject or user to activate certain roles. For example, if two roles (guest and administrator) are assigned to a user, establishing a session with guest will only activate the privileges granted to the role guest. If you use administrator to establish a session, you will only activate the privileges granted to the role guest, whereas if you use administrator to establish a session, you will be granted privileges based on the role administrator.Hierarchical RBAC (Hierarchical RBAC): This component introduces a hierarchy to the RBAC model and overrides the core RBAC. Since each unit structures its organization in a hierarchical manner, this component can easily correspond to the organizational structure of the unit. In simple terms, hierarchical RBACs support the inheritance of permissions between roles. For example, the heads of multiple business units can inherit all the permissions assigned to each business unit, but also have the permissions assigned to the role "business unit head" itself. A hierarchical RBAC-enabled system defines two models: a general role hierarchy ------------------------------------------------------ that supports multiple role inheritance; and a limited role hierarchy ( generalrole hierarchy) --------- when the model contains restrictions on the type of inheritance.Constraints RBAC (ConstraintRBAC): this component introduces the concept of separation of duties and its main goal is to ensure that multiple roles are allowed to perform a specific task in order to avoid collusion and fraud. It is divided into the following two subcomponents.