a named set of permissions or access rights which are needed to perform a task.