Both models can be used to implement PoLP. With [ABAC](https://en.wikipedia.org/wiki/Attribute-based_access_control), users gain access privileges by meeting a combination of specific attributes, such as type of user and resources requested. With [RBAC](https://en.wikipedia.org/wiki/Role-based_access_control), users are granted privileges strictly according to their assigned role.