1. A token allowing its holder an access right. Note: Capability-based systems (e.g. PIDs) provide added value in authentication but, since they are not cryptographically secure, cannot replace the password system. 2. As used in the context of security, a form of privilege attribute. It is a token (recognized by a process managing access to security objects) possession of which grants access to the security objects to which the token applies. 3. A privilege attribute used as an identifier for a resource such that possession of the privilege attribute confers access rights for the resource. 4. A token used as an identifier for a resource such that possession of the token confers access rights for the resource.