An entry, in an access-control list, that contains a set of access rights and a security identifier, that identifies a trustee for whom rights are granted, denied, or audited.