Identity-based security policy

Definition
An identity-based security policy is

"[a] security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users, process, or device) requesting access."