Authorization policies

Definition
Authorization policies

"determine how authorization decisions are made. Authorization policies base decision making on a variety of factors, including subject identifiers (such as names) and subject attributes other than identifiers (such as employee status, credit rating, and so on)."