Definition:
- With standard permissions, a sysadmin cannot provide UserA with rw- and UserB with r—.
- Nor can GroupA be given rwx to a directory while GroupB is given r-x.
- ACL allows this by adding more permission strings
- A list of permissions attached to an object