Non-ACL authorization
If ACL authorization is not enabled, the identities and protection modes that are defined by the operating system are administered directly.
ACLs can protect the following object types: VOB object, policy, rolemap, and element.