These are lists to allow/disallow access to a network or OS resources. The are used by: Firewall OS software. Often used during: NAT QoS Models MAC DAC RBAC Privileged Access Management