An entity whose authority need to be checked. Can be a user or role as in Suite access control. Example: PI/researcher. The former can change the budget but the latter can view it.
