The type of operations permitted for a given user of a certain system resource on a network or a file server.