Access restrictions based off Active Directory attributes. Attributes can be specific like: Location Job title Department