A specific right assigned to a user for a business object. Primary examples are read, write, append, delete, share, and assign.