Access controls define the allowable interactions between subjects and objects.
They define contains rules which govern the interactions between subjects and objects and permissions subjects can grant to other subjects. The interactions between subjects and objects can be: take, grant, create, remove...