Contains a list of userids or groups and their security permissions. Identifies who can update, modify, or delete an object on a computer or resource on the network.