In label-based access control, a database object that represents one of the criteria that an organisation uses to decide who has access to specific data. See also security label, element.