BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

6.2.2 Authorization and Access Rights 1129

NIST PIV and digital identity SP 800-217 (Draft)
All changes in this version
first version loaded 6 Protocol Requirements 996 part of 6.2

Title

Authorization and Access Rights 1129

Control

1130 1131 1132

1133 1134

1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145

1146

1147

1148

1149

1150

1151

1152 1153

1154 1155 1156 1157 1158 1159

1160 1161 1162 The assertion MAY contain indicators for the authorizations and access rights that the subscriber has at the RP, such as a set of roles within an organization. The RP SHALL trust these only as subject to the details of the trust agreements between the IdP and RP.

As the point of enforcement, the RP MAY override these authorizations by additionally restricting access as necessary.