Assigning permissions via roles versus evaluating policies against attributes — the implementation tradeoffs of each.
Practice MCQs for this concept are coming soon.