The permissions, determined by security policy, that code will be given, allowing it access to resources and giving it identity. The granted permissions are determined by both the requested permissions and what is allowed by the security policy configuration.