this mechanism encompasses the components and policies necessary to control and track user identities and access privileges for it resources, environments, and systems.