The authorization to execute a particular action for a particular object type (for example, to read a document or to change a material).