NIST SP 800-210 General Access Control Guidance for Cloud Systems
Section 5: Access control guidance for SaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

NIST SP 800-210 General Access Control Guidance for Cloud Systems 5.3: Assign and revoke privileges through a flexible, real-time mechanism

What does 5.3 require?

Privilege management, which adds, removes and changes a subject's privileges, is designed to work flexibly and in real time so that the SaaS stays usable; a privilege management infrastructure using attribute or role specification certificates can carry the assignments.

Maintained by Gerard Blokdyk

Other controls in Section 5: Access control guidance for SaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-210 General Access Control Guidance for Cloud Systems controls