The security mechanism that limits access to data, software, and hardware resources to authorized users.