Defines the roles that are required to execute a method. Defines the user or group IDs of people who do (or do not) have explicit access to a file or directory.