« Back to Glossary IndexToken based access control associates a list of objects and their privileges with each user. (The opposite of list based.)