In Pega, a 'Deny' rule is used to explicitly deny access to specific functionality or rules for certain users or access groups. While Operators, Rule Sets, and Classes are all part of Pega's security model, the specific rule type used to restrict access is the Deny rule.