Discretionary Access Control

Now that we have covered the filesystem and process management, there should be a way to restrict permissions to the files that you are creating. In other words, you shouldn't grant everyone access to everything and most organizations follow the principle of giving the most granular permissions. Discretionary Access Control (DAC) is a security implementation that restricts access to objects such as files and directories. A user or a group of users gets access based on ownership and the permissions on the objects.

In cloud environments, user and group management may not be a part of your daily job. It's often delegated to identity management systems such as Active Directory (AD), and you don't need many user accounts; authentication and authorization at an application level are more important nowadays. But it's still a good idea to be able to verify users and know how the underlying system works.

User Management

If you deploy...