It defines a set of rules and permissions for what actions different users can perform within the system.