A set of permitted operations and classes of data that users need access to so they can perform specific job duties.