Attribute-based access control focuses on the characteristics of the user, the requested access, the requested resource, and the conditions or environment of the request. The user, the request, the resource, and the environment in which the request is submitted are all attributes.