An access control list is an object associated with a resource that defines access privileges for individual users or groups of users.