Definition
The set of policies, roles, authorities, technical mechanisms and procedures used to identify users, determine their permissions (who may view, copy, modify, or distribute a resource), and enforce those permissions across systems and workflows.