The supplemental attributes of a user credential that describes the fine-grained conditions that can be used in the authorization of requests for resources.