Attribute associated with DECdns clearinghouses, directories, object entries, and soft links that determines who has access to them, and what the access rights are; consists of one or more ACEs.