In RACF, the part of a resource profile that specifies the users and groups that may access the resource and the level of access granted to each.