Which authorization-mode allows granular control over the operations that different entities can perform on different objects in a Kubernetes cluster?

Webhook Mode Authorization Control delegates authorization decisions to an external HTTP service, but RBAC is the standard for defining the granular rules themselves within Kubernetes.

Role Based Access Control (RBAC) allows administrators to define `Roles` or `ClusterRoles` with specific permissions (verbs like `get`, `list`, `create` on resources like `pods`, `deployments`) and then bind these roles to users or service accounts using `RoleBindings` or `ClusterRoleBindings`. This provides a powerful and flexible way to control who can do what in the cluster.

Node Authorization Access Control is a specialized authorization mode primarily used by kubelets to authorize API requests for resources they manage, not general user/service account granularity.

Attribute Based Access Control (ABAC) is an older, less flexible authorization mode that uses attributes for policies and is generally deprecated in favor of RBAC.