Which concept specifically defines the right to perform actions on resources within a system?

• A. Permissions
• B. Role definitions
• C. Access control lists
• D. Capabilities

Answer: (A)

Permissions define the authorization to perform specific actions on a resource within a system. They are the explicit rights that say what a user or process is allowed to do with that resource, such as read, write, execute, or delete. Roles group multiple permissions to simplify assigning broad capabilities. Access control lists specify which identities have which permissions on an object, while capabilities are tokens that grant the right to perform actions on a resource. The key idea here is that the permission itself is the defined right to act on a resource.