NGAC is a model for user access decisions that represents the system that using a graph containing several entity types connected by line segments that define the relationships between entities. It is more complex than other access control models, but offers more granularity in terms of who can access what and what kind of access everyone has, while also being easier to audit.