A subject is any entity that requests access to assets.An object responds to the subject's request.A rule determines if the subject is allowed to access the object.