Organisation-based access control

Imagine you're playing a game with your friends and you have a secret base that you don't want anyone else to access. You only want your friends who are part of your secret team to be able to enter your secret base.

Similarly, in an organisation, there are certain areas or resources that only certain people should be able to access. This can be anything from files and folders on a computer to physical areas in a building or equipment.

Organisation-based access control is a system that makes sure only the right people are allowed to access these areas or resources. It works like a gatekeeper who checks if you have the right key before letting you enter.

The people who manage the access control system decide who gets access to different areas and resources in the organisation. This could be based on different things like your job role or level of authority. For example, your boss might have access to sensitive company documents that you do not.

In order to determine who should have access to certain areas or resources, the access control system uses a combination of passwords, ID cards, and other security measures.

So, just like in the game where you only let your trusted friends into your secret base, an organisation-based access control system only lets in the people who are authorised to access certain areas or resources.