A type of security policy applied in a network domain environment. The policy dictates what a set of users can do.