Authorization granted to an individual or group to access data or a process in accordance with a pre-defined procedure (e.g. creation, deletion, updating and viewing).