A system admin is looking to implement attribute-based access control (ABAC) in their Adobe Real- Time CDP (RTCDP) to support unique data access…

The most efficient and scalable method to set up attribute-based access control (ABAC) in Adobe Real-Time CDP is by applying custom labels to data attributes (such as schema fields or segments) and then creating policies that link these labels to user roles. This approach allows administrators to define access rules based on the data's characteristics rather than managing permissions for each user or group individually. When a user's role has a policy attached, their access to data is dynamically determined by the labels on that data, making it highly efficient to manage complex access requirements.

A. Creating individual policies for each user group is a feature of role-based access control (RBAC) and is less efficient and scalable than ABAC.

B. Distributing data into different databases is a data architecture strategy, not the method for implementing ABAC within the AEP environment.

C. Regularly updating user roles is a manual maintenance task associated with RBAC, which ABAC is designed to simplify and automate.

1. Adobe Experience Platform Documentation. (2023). Attribute-based access control overview. Adobe Experience League. Retrieved from https://experienceleague.adobe.com/docs/experience-platform/access-control/abac/overview.html. (The "Introduction" states, "Attribute-based access control is a capability... that enables administrators to control access to specific objects and/or capabilities based on attributes. Attributes are metadata that describe objects, such as a label that has been added to a schema field or segment.")

2. Adobe Experience Platform Documentation. (2023). End-to-end guide for attribute-based access control. Adobe Experience League. Retrieved from https://experienceleague.adobe.com/docs/experience-platform/access-control/abac/end-to-end-guide.html. (This guide outlines the workflow: "Label your data", "Create roles", and "Create policies" that connect roles and labels.)