Control who can access resources, under what conditions, and with what level of access.