A set of entries that define an operator's authorization for accessing commands and, depending on the level of granularity that an enterprise chooses, command keywords and keyword values.