What is access control? Access control is the technical mechanism that restricts unauthorized users from the system, grants access to authorized users, and limits what authorized users can do on the system. As such, access controls in addition to security policy are the key components of information security. There are several ways in which an organization can implement access control. There are two popular models to follow when it comes to access control: mandatory and discretionary.