Access Control Fundamentals

14.2. Decentralized Access Control

• A decentralized access control administration method gives control of access to the people closer to the resources
• In this approach, it is often the functional manager who assigns access control rights to employees.
• Changes can happen faster through this type of administration because not just one entity is making changes for the whole organization.
• There is a possibility for conflicts to arise that may not benefit the organization as because different managers and departments can practice security and access control in different ways.
• There is a possibility of certain controls to overlap, in which case actions may not be properly proscribed or restricted.
• This type of administration does not provide methods for consistent control, as a centralized method would.