A definition that contains the access rights and data validations defined for a protected business object. It allows controlled access to business data that is provided by the protected business object.