Controls access to, and use of, business objects. Access control is based on rules that can be individually adapted to internal organizational structures.