Access control to a file, printer or other network resource based on username. It provides greater protection than share-level security, because users are identified individually or within a group.