The implementation of a decision that determines the Permissions of a Group, a Role or an identity whose access is based on particular attributes.

Source: http://identityaccessman.blogspot.com/2006/08/identity-dictionary.html