A designation that determines who can access a particular file and how the user can access the file.