The capabilitiy for the management of all attributes regarding the subjects of access control decisions. These principals can be users, machines, or services. Authorization decisions may need to consider many attributes about the principles including role, location, relationships to accounts other principals, etc.