The logical representation of an actual system resource that is used for applying ACLs and POPs and for authorizing user access. See also protected object policy, protected object space.