The portion of a security identifier (SID) that identifies a user or group in relation to the authority that issued the SID. The authority is usually either the local computer or a domain.