A database and set of services that allows administrators to manage permissions, access to network resources, and stored data objects (user, group, application, or devices)