Is a set of rights defined for a subject and an object. they are based on the subject's identity. authentication authorization credentials passwords

The answer is "authorization".

Authorization is the capacity of indicating access rights/benefits to assets concerning data security and PC security in general and to get to control in particular. All the more formally, "to approve/authorize" is to characterize an access strategy. For instance, HR staff is regularly approved to get to worker records and this approach is normally formalized as access control rules in a PC framework. During this task, the framework utilizes subject's identity for authorization.  

answer; exaggerate what you believe is the deception and state it, hoping that the other will jump in to "correct" the statement;