A Resource Extension complements the Resource Descriptor by adding further, more detailed information. In most cases, this concerns further entitlements of the account within the relevant resource. Examples are groups the account is a member of, or network shared drives. Just like the Access itself (which the Resource Descriptor describes) every Extension can have certain parameters attached, like time limit for a network shared drive or membership in a group.