Intent-Based Access Control: Using LLMs to Intelligently Manage Access Control

In every enterprise database, administrators must define an access control policy that specifies which users have access to which assets. Access control straddles two worlds: policy (organization-level principles that define who should have access) and process (database-level primitives that actually implement the policy). Assessing and enforcing process compliance with a policy is a manual and ad-hoc task. This paper introduces a new paradigm for access control called Intent-Based Access Control for Databases (IBAC-DB). In IBAC-DB, access control policies are expressed …

access access control administrators assets compliance control cs.cr cs.db database enterprise intent llms manage organization policy principles process