Definicija: A class that defines access to a resource or defines an indentity by supporting authorization checks.