A digitally signed document that asserts that the subject is entitled to access a Resource.

Note 1 to entry: The document includes the name of the subject and the Resource being accessed.