A system of access control that assigns security labels or classifications to system resources and allows access only to entities (people, processes, devices) with distinct levels of authorization ...

An access control system that permits specific entities (people, processes, devices) to access system resources according to permissions for each particular entity. Contrast with mandatory access ...