Identifiers that control access to files; consists of three fields: user, group, and other; generally controls read, write, and execute operations.