RBAC assigns permissions through roles. ABAC evaluates attributes (user, resource, environment) for finer-grained decisions. Modern IGA platforms often combine both.
All comparisons
Comparison
RBACvsABAC
Role-based versus attribute-based access control