The unique identification of a user used during authorization to determine if access is permitted to the resource.