The main access control models include discretionary access control (DAC), mandatory access control (MAC), role-based access control (RBAC), and attribute-based access control (ABAC). Each model defines how permissions get assigned. DAC lets owners set access, MAC enforces strict system-level policies, RBAC assigns permissions based on roles within your organization, and ABAC uses multiple factors such as time, location, and behavior.