Overview
ABAC is more granular than RBAC. It considers attributes of the user (e.g., department), the resource (e.g., sensitivity level), and the environment (e.g., time of day, location).
Example
'Allow managers to access financial reports only during business hours from the office network.'